Advisories · Technology
Veeam ONE.
Every CVE that names Veeam ONE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
Authentication bypass in Veeam ONE
- Veeam ONE
- Authentication bypass
- CVSS 8.5 High
Insufficiently protected credentials in Veeam ONE
- Veeam ONE
- Hard-coded credentials
- CVSS 9.3 CriticalCritical · CVSS 9+
Authentication bypass in Veeam One
- Veeam One
- Authentication bypass
- CVSS 8.6 High
Code injection in Veeam ONE
- Veeam ONE
- Code injection
- CVSS 5.3 Medium
Incorrect authorization in Veeam ONE
- Veeam ONE
- Broken access control
- CVSS 8.6 High
SQL injection in Veeam ONE
- Veeam ONE
- SQL injection
- CVSS 8.7 High
Improper authentication in Veeam ONE
- Veeam ONE
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
Code injection in Veeam ONE
- Veeam ONE
- Code injection
- CVSS 8.4 High
Improper privilege management in Veeam ONE
- Veeam ONE
- Privilege escalation
- CVSS 7.5 High
Improper access control in Veeam One
- Veeam One
- Broken access control
- CVSS 7.8 High
Improper access control in Veeam One
- Veeam One
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Execution with unnecessary privileges in Veeam One
- Veeam One
- Privilege escalation
- CVSS 7.5 High
Improper access control in Veeam One
- Veeam One
- Broken access control
- CVSS 7.3 High
Cross-site scripting in Veeam One
- Veeam One
- Cross-site scripting (XSS)
- CVSS 9.0 CriticalCritical · CVSS 9+
Information disclosure in Veeam One
- Veeam One
- Information disclosure
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Insufficiently protected credentials in Veeam One
- Veeam One
- Hard-coded credentials
- CVSS 4.5 Medium
Veeam One: A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE…
- Veeam One
- CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Information disclosure in Veeam One
- Veeam One
- Information disclosure
- CVSS 4.3 Medium
Insecure storage of sensitive information in Veeam One
- Veeam One
- Information disclosure
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
XML external entity injection in Veeam ONE
- Veeam ONE
- XML external entities (XXE)
- CVSS 7.5 High
XML external entity injection in Veeam ONE
- Veeam ONE
- XML external entities (XXE)