VEEAM ONE

• CVE-2026-107671 High 8.5 A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification. 0.3%
• CVE-2026-64632 High 8.5 A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account. 0.4%
• CVE-2026-65641 Critical 9.3 A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account. 0.5%
• CVE-2026-58074 High 8.6 A vulnerability allowing a high-privileged user to execute arbitrary code on the server. 0.5%
• CVE-2026-64630 Medium 5.3 A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link. 0.4%
• CVE-2026-64631 High 8.6 A vulnerability allowing a low-privileged user to inject SQL and extract database contents. 0.4%
• CVE-2026-58075 High 8.7 A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally. 0.4%
• CVE-2026-64633 Critical 10.0 A vulnerability allowing remote unauthenticated code execution on the agent host. 0.6%
• CVE-2026-64634 High 8.4 A vulnerability allowing local privilege escalation to the Reporter service context. 0.2%
• CVE-2024-42021 High 7.5 An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials. 0.3%
• CVE-2024-42023 High 7.8 An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely. 0.5%
• CVE-2024-42024 Critical 9.1 A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed. 1.3%
• CVE-2024-42022 High 7.5 An incorrect permission assignment vulnerability allows an attacker to modify product configuration files. 0.3%
• CVE-2024-42020 High 7.3 A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection. 0.4%
• CVE-2024-42019 Critical 9.0 A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This attack requires user interaction and data collected from Veeam Backup & Replication. 0.5%
• CVE-2023-38548 Critical 9.8 A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by the Veeam ONE Reporting Service. 11.8%
• CVE-2023-38549 Medium 4.5 A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by the Veeam ONE Reporting Service. Note: T 19.1%
• CVE-2023-38547 Critical 9.9 A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its configuration database. This may lead to remote code execut 18.9%
• CVE-2023-41723 Medium 4.3 A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note: The criticality of this vulnerability is reduced because the user with the Read- 12.3%
• CVE-2020-15419 High 7.5 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415. Authentication is not required to exploit this vulnerability. T 59.8%
• CVE-2020-15418 High 7.5 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415. Authentication is not required to exploit this vulnerability. T 9.4%