agent vulnerabilities

2 known vulnerabilities in agent from Veeam. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Agent for Windows: Untrusted Search Path

  CVE-2024-45207Dec 4, 2024Veeam

  DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Ag

• 8.8 High severity

  Backup & Replication: Incorrect Authorization

  CVE-2024-42452Dec 4, 2024Veeam

  A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating privileges to system-level access. This allows the attacker to upload files to the server with e