Veeam ≫ One

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.

A vulnerability allowing local privilege escalation to the Reporter service context.

A vulnerability allowing remote unauthenticated code execution on the agent host.

A vulnerability allowing a low-privileged user to inject SQL and extract database contents.

A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.

A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally.

A vulnerability allowing a high-privileged user to execute arbitrary code on the server.

An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely.

A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed.