Known vulnerabilities in Veeam Service Provider Console

Vendor: Veeam
Software: Veeam Service Provider Console
Software CPE: cpe:2.3:a:veeam:veeam_service_provider_console:*:*:*:*:*:*:*:*
Website: https://www.veeam.com/
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Veeam Service Provider Console Veeam Service Provider Console is affected by 11 known vulnerabilities: 4 high, 7 medium Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140869 - Improper Authentication
CVE-2026-58073		 CWE-287 Medium
No
No
 9.3.0.35057 04.08.2026 SB2026080468
#VU140870 - Improper Access Control
CVE-2026-58072		 CWE-284 Medium
No
No
 9.3.0.35057 04.08.2026 SB2026080468
#VU140871 - Resource exhaustion
CVE-2026-58067		 CWE-400 Medium
No
No
 9.3.0.35057 04.08.2026 SB2026080468
#VU140872 - Improper Access Control
CVE-2026-58071		 CWE-284 Medium
No
No
 9.3.0.35057 04.08.2026 SB2026080468
#VU132382 - Improper Access Control
CVE-2026-32998		 CWE-284 Medium
No
No
 9.2.1.33875 27.05.2026 SB2026052780
#VU101170 - Exposure of sensitive information to an unauthorized actor
CVE-2024-42449		 CWE-200 Medium
No
No
 8.1.0.21999 03.12.2024 SB2024120374
#VU101169 - Permissions, Privileges, and Access Controls
CVE-2024-42448		 CWE-264 Medium
No
No
 8.1.0.21999 03.12.2024 SB2024120374
#VU96940 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38651		 CWE-22 High
No
No
 8.1.0.21377 06.09.2024 SB2024090675
#VU96939 - Unrestricted Upload of File with Dangerous Type
CVE-2024-39715		 CWE-434 High
No
No
 8.1.0.21377 06.09.2024 SB2024090675
#VU96938 - Unrestricted Upload of File with Dangerous Type
CVE-2024-39714		 CWE-434 High
No
No
 8.1.0.21377 06.09.2024 SB2024090675
#VU96936 - Improper Access Control
CVE-2024-38650		 CWE-284 High
No
No
 8.1.0.21377 06.09.2024 SB2024090675