Veeam ONE vulnerabilities

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA…

Veeam · ONE

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.

Veeam · ONE

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.

Veeam · One

A vulnerability allowing a high-privileged user to execute arbitrary code on the server.

Veeam · ONE

A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.

Veeam · ONE

A vulnerability allowing a low-privileged user to inject SQL and extract database contents.

Veeam · ONE

A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally.

Veeam · ONE

A vulnerability allowing remote unauthenticated code execution on the agent host.

Veeam · ONE

A vulnerability allowing local privilege escalation to the Reporter service context.

Veeam · ONE

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.

Veeam · One