Class familyVeeam · Backup & Replication
Veeam Backup & Replication missing authentication flaws, 2022–2024
5 Backup & Replication CVEs with CWE-306 weaknesses, 17 Mar 2022 to 4 Dec 2024. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2022’22
1 2023’23
3 2024’24
In CISA KEVNot in KEV
20221 CVE, 1 in KEV
20231 CVE, 1 in KEV
20243 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-26501KEV | 17 Mar 2022 | Veeam Backup & Replication Remote Code Execution Vulnerability | Grouped by weakness | 73.0 |
| CVE-2023-27532KEV | 10 Mar 2023 | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability | Grouped by weakness | 82.0 |
| CVE-2024-40717 | 4 Dec 2024 | A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code… | Grouped by weakness | 17.2 |
| CVE-2024-42455 | 4 Dec 2024 | A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit… | Grouped by weakness | 24.3 |
| CVE-2024-42456 | 4 Dec 2024 | A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a… | Grouped by weakness | 12.8 |