Advisories · Technology

Veeam Recovery Orchestrator.

Every CVE that names Veeam Recovery Orchestrator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-29855 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Hard-coded credentials in Veeam Recovery Orchestrator
- Veeam Recovery Orchestrator
- Hard-coded credentials
Not analysed yet 11 Jun 2024
CVE-2024-22022 CVE record

CVSS 8.8 High

Information disclosure in Veeam Recovery Orchestrator and others
- Veeam Recovery Orchestrator
- Veeam Availability Orchestrator
- Information disclosure
Not analysed yet 7 Feb 2024
CVE-2024-22021 CVE record

CVSS 6.5 Medium

Improper authorization in Veeam Recovery Orchestrator and others
- Veeam Recovery Orchestrator
- Veeam Disaster Recovery Orchestrator
- Broken access control
Not analysed yet 7 Feb 2024