Known vulnerabilities in Backup & Replication 11

Vendor: Veeam
Version: 11
Software CPE: cpe:2.3:a:veeam:backup_and_replication:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 1
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Backup & Replication version 11 Backup & Replication 11 is affected by 8 vulnerabilities: 1 critical, 3 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96915 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-40712
CWE-22 Low
No
No
12.2.0.334 06.09.2024 SB2024090618
#VU96914 - Improper Certificate Validation
CVE-2024-40714
CWE-295 Medium
No
No
12.2.0.334 06.09.2024 SB2024090618
#VU96913 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-39718
CWE-22 Medium
No
No
12.2.0.334 06.09.2024 SB2024090618
#VU96912 - Improper input validation
CVE-2024-40710
CWE-20 High
No
No
12.2.0.334 06.09.2024 SB2024090618
#VU96911 - Improper Authorization
CVE-2024-40713
CWE-285 Medium
No
No
12.2.0.334 06.09.2024 SB2024090618
#VU96908 - Improper input validation
CVE-2024-40711
CWE-20 Critical
Public exploit available
Exploited
12.2.0.334 06.09.2024 SB2024090618
#VU61469 - Unrestricted Upload of File with Dangerous Type
CVE-2022-26501
CWE-434 High
No
Exploited
10a 10.0.1.4854 P20220304, 11a 11.0.1.1261 P20220302 18.03.2022 SB2022031811
#VU61468 - Unrestricted Upload of File with Dangerous Type
CVE-2022-26500
CWE-434 High
No
Exploited
10a 10.0.1.4854 P20220304, 11a 11.0.1.1261 P20220302 18.03.2022 SB2022031811