Veeam Vulnerabilities and Affected Products
Vulnerabilities associated with Backup for Microsoft Azure.
Products
Clear product- One18 vulnerabilities
- Backup & Replication16 vulnerabilities
- Backup and Replication14 vulnerabilities
- Backup and Recovery13 vulnerabilities
- Service Provider Console10 vulnerabilities
- service_provider_console7 vulnerabilities
- backup_\&_replication6 vulnerabilities
- Veeam Service Provider Console5 vulnerabilities
- agent4 vulnerabilities
- backup_enterprise_manager4 vulnerabilities
- backup_and_replication3 vulnerabilities
- Recovery Orchestrator3 vulnerabilities
- Agent for Windows2 vulnerabilities
- Availability Orchestrator2 vulnerabilities
- Backup for Microsoft Azure2 vulnerabilities
- One Agent2 vulnerabilities
- Software Appliance2 vulnerabilities
- veeam_backup_\&_replication2 vulnerabilities
- Agent for Microsoft Windows1 vulnerability
- Backup and Recovery1 vulnerability
- Backup for AWS1 vulnerability
- Backup for Google Cloud1 vulnerability
- Backup for Microsoft Windows1 vulnerability
- Backup for Nutanix AHV1 vulnerability
- Backup for Oracle Linux Virtualization Manager and Red Hat Virtualization1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-23114CRITICAL | A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a failure to properly validate TLS certificate. CWE-295Feb 5, 2025 | CVSS9.0v3.0 | EPSS0.637% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-23082HIGH | Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. CWE-918Jan 14, 2025 | CVSS7.2v3.0 | EPSS0.341% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |