Known vulnerabilities in Backup & Replication - page 2
Vendor:
Veeam
Software:
Backup & Replication
Software CPE:
cpe:2.3:a:veeam:backup_and_replication:*:*:*:*:*:*:*:*
Website:
https://www.veeam.com/
Total vulnerabilities:
39
Public exploits:
2
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
13.0.3.63
13.1.1.18
13.1.0.411
12.3.2.4854
13.0.2.29
12.3.2.4465
13.0.1.2067
13.0.1.1071
13.0.1.180
13.0.0.4967
3.0.1.251
3.0.0.238
2.0.0.152
1.0.1.76
1.0.0.64
12.3.2.4165
12.3.2.3617
12.3.1.1139
12.3.0.310
4.0.0.80
4.1.0.96
4.1.1.105
4.1.2.125
5.0.0.179
5.0.1.198
5.0.2.224
5.0.2.230
6.0.0.153
6.0.0.158
6.0.0.164
6.0.0.181
6.1.0.181
6.1.0.204
6.1.0.205
6.5.0.106
6.5.0.109
6.5.0.128
6.5.0.144
7.0.0.690
7.0.0.715
7.0.0.764
7.0.0.771
7.0.0.833
7.0.0.839
7.0.0.870
7.0.0.871
8.0.0.807
8.0.0.817
8.0.0.917
8.0.0.2018
8.0.0.2021
8.0.0.2029
8.0.0.2030
8.0.0.2084
9.0.0.773
9.0.0.902
9.0.0.1491
9.0.0.1715
9.5.0.580
9.5.0.711
9.5.0.802
9.5.0.823
9.5.0.1038
9.5.0.1536
9.5.0.1922
9.5.4.2399
9.5.4.2615
9.5.4.2753
9.5.4.2866
10.0.0.4442
10.0.0.4461
10.0.0.4461 P1
10.0.0.4461 P2
10.0.1.4848
10.0.1.4854
10.0.1.4854 P20201202
10.0.1.4854 P20210609
10.0.1.4854 P20220304
11.0.0.825
11.0.0.837
11.0.0.837 P20210319
11.0.0.837 P20210324
11.0.0.837 P20210401
11.0.0.837 P20210507
11.0.0.837 P20210525
11.0.1.1261
11.0.1.1261 P20211123
11.0.1.1261 P20211211
11.0.1.1261 P20220302
11.0.1.1261 P20240304
12.0.0.1402
12.0.0.1420
12.0.0.1420 P20230412
12.0.0.1420 P20230718
12.1.0.2131
12.1.1.56
12.2.0.334
12.1.2.172
11.0.1.1261 P20230227
12.0.0.1420 P20230223
10a (build 10.0.1.4854 P20220304)
11a (build 11.0.1.1261 P20220302)
11
10
9.5
Vulnerabilities (39)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105884 - Deserialization of Untrusted Data CVE-2021-35971 |
CWE-502 | High | 10.0.1.4854 P20210609, 11.0.0.837 P20210507 | 19.03.2025 |
SB2021070627 |
||
| #VU105873 - Improper input validation CVE-2025-23120 |
CWE-20 | Medium | 12.3.1.1139 | 19.03.2025 |
SB2025031961 |
||
| #VU101178 - Incorrect Default Permissions CVE-2024-45204 |
CWE-276 | Medium | 12.3.0.310 | 03.12.2024 |
SB2024120375 |
||
| #VU101177 - Unprotected Storage of Credentials CVE-2024-42457 |
CWE-256 | Medium | 12.3.0.310 | 03.12.2024 |
SB2024120375 |
||
| #VU101176 - Permissions, Privileges, and Access Controls CVE-2024-42456 |
CWE-264 | Medium | 12.3.0.310 | 03.12.2024 |
SB2024120375 |
||
| #VU101175 - Deserialization of Untrusted Data CVE-2024-42455 |
CWE-502 | Medium | 12.3.0.310 | 03.12.2024 |
SB2024120375 |
||
| #VU101174 - Permissions, Privileges, and Access Controls CVE-2024-42453 |
CWE-264 | Medium | 12.3.0.310 | 03.12.2024 |
SB2024120375 |
||
| #VU101173 - Permissions, Privileges, and Access Controls CVE-2024-42452 |
CWE-264 | Medium | 12.3.0.310 | 03.12.2024 |
SB2024120375 |
||
| #VU101172 - Unprotected Storage of Credentials CVE-2024-42451 |
CWE-256 | Medium | 12.3.0.310 | 03.12.2024 |
SB2024120375 |
||
| #VU101171 - Permissions, Privileges, and Access Controls CVE-2024-40717 |
CWE-264 | Medium | 12.3.0.310 | 03.12.2024 |
SB2024120375 |
||
| #VU96915 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-40712 |
CWE-22 | Low | 12.2.0.334 | 06.09.2024 |
SB2024090618 |
||
| #VU96914 - Improper Certificate Validation CVE-2024-40714 |
CWE-295 | Medium | 12.2.0.334 | 06.09.2024 |
SB2024090618 |
||
| #VU96913 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-39718 |
CWE-22 | Medium | 12.2.0.334 | 06.09.2024 |
SB2024090618 |
||
| #VU96912 - Improper input validation CVE-2024-40710 |
CWE-20 | High | 12.2.0.334 | 06.09.2024 |
SB2024090618 |
||
| #VU96911 - Improper Authorization CVE-2024-40713 |
CWE-285 | Medium | 12.2.0.334 | 06.09.2024 |
SB2024090618 |
||
| #VU96908 - Improper input validation CVE-2024-40711 |
CWE-20 | Critical | 12.2.0.334 | 06.09.2024 |
SB2024090618 |
||
| #VU74001 - Missing Authentication for Critical Function CVE-2023-27532 |
CWE-306 | Medium | 11.0.1.1261 P20230227, 12.0.0.1420 P20230223 | 24.03.2023 |
SB2023032404 |
||
| #VU61469 - Unrestricted Upload of File with Dangerous Type CVE-2022-26501 |
CWE-434 | High | 10a 10.0.1.4854 P20220304, 11a 11.0.1.1261 P20220302 | 18.03.2022 |
SB2022031811 |
||
| #VU61468 - Unrestricted Upload of File with Dangerous Type CVE-2022-26500 |
CWE-434 | High | 10a 10.0.1.4854 P20220304, 11a 11.0.1.1261 P20220302 | 18.03.2022 |
SB2022031811 |
Showing elements 21 - 40 out of 39