Threat database

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code.

EPSS 19%VulnerabilityVeeamGermanyUnited Kingdom+6

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user

EPSS 24%VulnerabilityVeeamGermanyFrance+8

A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with elevated permissions.

EPSS 0.3%VulnerabilityVeeamGermanyUnited Kingdom+6

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).

KEVEPSS 90%VulnerabilityVeeamUnited StatesGermany+8

Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to access the NTLM hash of the service account used by the Veeam Orchestrator Server Service.

EPSS 0.7%VulnerabilityVeeamGermanyFrance+5

Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope other than the one they are assigned to.

EPSS 0.4%VulnerabilityVeeamUnited StatesGermany+8

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.

CVE-2022-26501 is a remote code execution vulnerability in Veeam Backup & Replication's Distribution Service. It allows unauthenticated attackers to access internal API functions and potentially upload and execute malicious code remotely. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.

CVE-2022-26500 is a remote code execution vulnerability in Veeam Backup & Replication's Distribution Service. It allows unauthenticated attackers to access internal API functions and potentially upload and execute malicious code remotely. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.