Veeam Vulnerabilities and Affected Products
Vulnerabilities associated with Backup and Recovery.
Products
Clear product- One18 vulnerabilities
- Backup & Replication16 vulnerabilities
- Backup and Replication14 vulnerabilities
- Backup and Recovery13 vulnerabilities
- Service Provider Console10 vulnerabilities
- service_provider_console7 vulnerabilities
- backup_\&_replication6 vulnerabilities
- Veeam Service Provider Console5 vulnerabilities
- agent4 vulnerabilities
- backup_enterprise_manager4 vulnerabilities
- backup_and_replication3 vulnerabilities
- Recovery Orchestrator3 vulnerabilities
- Agent for Windows2 vulnerabilities
- Availability Orchestrator2 vulnerabilities
- Backup for Microsoft Azure2 vulnerabilities
- One Agent2 vulnerabilities
- Software Appliance2 vulnerabilities
- veeam_backup_\&_replication2 vulnerabilities
- Agent for Microsoft Windows1 vulnerability
- Backup and Recovery1 vulnerability
- Backup for AWS1 vulnerability
- Backup for Google Cloud1 vulnerability
- Backup for Microsoft Windows1 vulnerability
- Backup for Nutanix AHV1 vulnerability
- Backup for Oracle Linux Virtualization Manager and Red Hat Virtualization1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-40711CRITICAL | Veeam Backup and Replication Deserialization VulnerabilityA deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE). | CVSS9.8v3.1 | EPSS90.4% | PoCs0 | SignalsListed in CISA KEVKnown ransomware use1 Nuclei template | STIX |