Advisories · Technology

Veeam Backup & Replication.

Every CVE that names Veeam Backup & Replication among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-45204 CVE record

CVSS 7.7 High

Incorrect authorization in Veeam Backup & Replication
- Veeam Backup & Replication
- Broken access control
Not analysed yet 4 Dec 2024
CVE-2024-42451 CVE record

CVSS 7.7 High

Cleartext storage of sensitive information in Veeam Backup & Replication
- Veeam Backup & Replication
- Information disclosure
- Broken access control
Not analysed yet 4 Dec 2024
CVE-2024-42453 CVE record

CVSS 7.4 High

Missing authorization in Veeam Backup & Replication
- Veeam Backup & Replication
- Broken access control
Not analysed yet 4 Dec 2024
CVE-2024-42457 CVE record

CVSS 7.7 High

Insufficiently protected credentials in Veeam Backup & Replication
- Veeam Backup & Replication
- Hard-coded credentials
Not analysed yet 4 Dec 2024
CVE-2024-42452 CVE record

CVSS 8.8 High

Incorrect authorization in Veeam Backup & Replication
- Veeam Backup & Replication
- Broken access control
Not analysed yet 4 Dec 2024
CVE-2024-40717 CVE record

CVSS 8.8 High

Missing authentication in Veeam Backup & Replication
- Veeam Backup & Replication
- Authentication bypass
Not analysed yet 4 Dec 2024
CVE-2024-42456 CVE record

CVSS 8.8 High

Missing authentication in Veeam Backup & Replication
- Veeam Backup & Replication
- Authentication bypass
Not analysed yet 4 Dec 2024
CVE-2024-42455 CVE record

CVSS 7.1 HighCritical · CVSS 7+ and EPSS

Missing authentication in Veeam Backup & Replication
- Veeam Backup & Replication
- Authentication bypass
Not analysed yet 4 Dec 2024
CVE-2024-29851 CVE record

CVSS 7.2 High

Authentication bypass by replay in Veeam Backup & Replication
- Veeam Backup & Replication
- Authentication bypass
Not analysed yet 22 May 2024
CVE-2024-29852 CVE record

CVSS 2.7 Low

Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs.
- Veeam Backup & Replication
- CWE-280
Not analysed yet 22 May 2024
CVE-2024-29850 CVE record

CVSS 8.8 High

Authentication bypass by replay in Veeam Backup & Replication
- Veeam Backup & Replication
- Authentication bypass
Not analysed yet 22 May 2024
CVE-2024-29849 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Improper authentication in Veeam Backup & Replication
- Veeam Backup & Replication
- Authentication bypass
Not analysed yet 22 May 2024
CVE-2023-27532 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Missing authentication in Veeam Backup & Replication
- Veeam Backup & Replication
- Authentication bypass
Not analysed yet 10 Mar 2023