Veeam ≫ One

A vulnerability allowing local privilege escalation to the Reporter service context.

A vulnerability allowing remote unauthenticated code execution on the agent host.

A vulnerability allowing a low-privileged user to inject SQL and extract database contents.

A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.

A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally.

A vulnerability allowing a high-privileged user to execute arbitrary code on the server.

An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.

A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed.

An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely.

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.