Known vulnerabilities in Backup & Replication 12.0.0.1420 P20230412

Vendor: Veeam
Version: 12.0.0.1420 P20230412
Software CPE: cpe:2.3:a:veeam:backup_and_replication:*:*:*:*:*:*:*:*
Total vulnerabilities: 25
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Backup & Replication version 12.0.0.1420 P20230412 Backup & Replication 12.0.0.1420 P20230412 is affected by 25 vulnerabilities: 1 critical, 2 high, 20 medium, 2 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134000 - Improper Access Control
CVE-2026-44963
CWE-284 Medium
No
No
12.3.2.4854 09.06.2026 SB2026060931
#VU123971 - Improper input validation
CVE-2026-21708
CWE-20 Medium
No
No
12.3.2.4465, 13.0.1.2067 12.03.2026 SB2026031251
#VU123970 - Permissions, Privileges, and Access Controls
CVE-2026-21672
CWE-264 Low
No
No
12.3.2.4465, 13.0.1.2067 12.03.2026 SB2026031251
#VU123969 - Protection Mechanism Failure
CVE-2026-21668
CWE-693 Medium
No
No
12.3.2.4465 12.03.2026 SB2026031251
#VU123968 - Improper input validation
CVE-2026-21667
CWE-20 Medium
No
No
12.3.2.4465 12.03.2026 SB2026031251
#VU123967 - Improper input validation
CVE-2026-21666
CWE-20 Medium
No
No
12.3.2.4465 12.03.2026 SB2026031251
#VU116987 - Permissions, Privileges, and Access Controls
CVE-2025-48984
CWE-264 Medium
No
No
12.3.2.4165 14.10.2025 SB2025101450
#VU116986 - Permissions, Privileges, and Access Controls
CVE-2025-48983
CWE-264 Medium
No
No
12.3.2.4165 14.10.2025 SB2025101450
#VU111219 - Permissions, Privileges, and Access Controls
CVE-2025-24286
CWE-264 Medium
No
No
12.3.2.3617 17.06.2025 SB2025061726
#VU111218 - Improper input validation
CVE-2025-23121
CWE-20 High
No
No
12.3.2.3617 17.06.2025 SB2025061726
#VU105873 - Improper input validation
CVE-2025-23120
CWE-20 Medium
No
No
12.3.1.1139 19.03.2025 SB2025031961
#VU101178 - Incorrect Default Permissions
CVE-2024-45204
CWE-276 Medium
No
No
12.3.0.310 03.12.2024 SB2024120375
#VU101177 - Unprotected Storage of Credentials
CVE-2024-42457
CWE-256 Medium
No
No
12.3.0.310 03.12.2024 SB2024120375
#VU101176 - Permissions, Privileges, and Access Controls
CVE-2024-42456
CWE-264 Medium
No
No
12.3.0.310 03.12.2024 SB2024120375
#VU101175 - Deserialization of Untrusted Data
CVE-2024-42455
CWE-502 Medium
No
No
12.3.0.310 03.12.2024 SB2024120375
#VU101174 - Permissions, Privileges, and Access Controls
CVE-2024-42453
CWE-264 Medium
No
No
12.3.0.310 03.12.2024 SB2024120375
#VU101173 - Permissions, Privileges, and Access Controls
CVE-2024-42452
CWE-264 Medium
No
No
12.3.0.310 03.12.2024 SB2024120375
#VU101172 - Unprotected Storage of Credentials
CVE-2024-42451
CWE-256 Medium
No
No
12.3.0.310 03.12.2024 SB2024120375
#VU101171 - Permissions, Privileges, and Access Controls
CVE-2024-40717
CWE-264 Medium
No
No
12.3.0.310 03.12.2024 SB2024120375
#VU96915 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-40712
CWE-22 Low
No
No
12.2.0.334 06.09.2024 SB2024090618


Showing elements 1 - 20 out of 25