Known vulnerabilities in ONE

Vendor: Veeam
Software: ONE
Software CPE: cpe:2.3:a:veeam:one:*:*:*:*:*:*:*:*
Website: https://www.veeam.com/
Total vulnerabilities: 17
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ONE ONE is affected by 17 known vulnerabilities: 4 high, 6 medium, 7 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140873 - Improper input validation
CVE-2026-64633		 CWE-20 High
No
No
 13.1.0.7034 04.08.2026 SB2026080469
#VU140874 - Improper input validation
CVE-2026-58075		 CWE-20 Medium
No
No
 13.1.0.7034 04.08.2026 SB2026080469
#VU140875 - Improper input validation
CVE-2026-58074		 CWE-20 Low
No
No
 13.1.0.7034 04.08.2026 SB2026080469
#VU140876 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-64631		 CWE-89 Medium
No
No
 13.1.0.7034 04.08.2026 SB2026080469
#VU140877 - Improper input validation
CVE-2026-64634		 CWE-20 Low
No
No
 13.1.0.7034 04.08.2026 SB2026080469
#VU140878 - Improper Access Control
CVE-2026-64630		 CWE-284 Low
No
No
 13.1.0.7034 04.08.2026 SB2026080469
#VU96933 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-42020		 CWE-79 Low
No
No
 12.2.0.4093 06.09.2024 SB2024090643
#VU96932 - Improper Access Control
CVE-2024-42022		 CWE-284 Low
No
No
 12.2.0.4093 06.09.2024 SB2024090643
#VU96931 - Improper Access Control
CVE-2024-42021		 CWE-284 Medium
No
No
 12.2.0.4093 06.09.2024 SB2024090643
#VU96930 - Permissions, Privileges, and Access Controls
CVE-2024-42023		 CWE-264 Medium
No
No
 12.2.0.4093 06.09.2024 SB2024090643
#VU96929 - Exposure of sensitive information to an unauthorized actor
CVE-2024-42019		 CWE-200 Medium
No
No
 12.2.0.4093 06.09.2024 SB2024090643
#VU96928 - Permissions, Privileges, and Access Controls
CVE-2024-42024		 CWE-264 Medium
No
No
 12.2.0.4093 06.09.2024 SB2024090643
#VU27109 - Deserialization of Untrusted Data
CVE-2020-10915		 CWE-502 High
Available
No
 9.5.4.4587, 10.0.0.750 22.04.2020 SB2020042212
#VU27107 - Deserialization of Untrusted Data
CVE-2020-10914		 CWE-502 High
Available
No
 9.5.4.4587, 10.0.0.750 22.04.2020 SB2020042212
#VU19557 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14298		 CWE-79 Low
No
No
 - 29.07.2019 SB2019072906
#VU19554 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14297		 CWE-79 Low
No
No
 - 29.07.2019 SB2019072906
#VU35939 - Cross-Site Request Forgery (CSRF)
CVE-2019-11569		 CWE-352 High
No
No
 - 06.05.2019 SB2019050636