One vulnerabilities
5 known vulnerabilities in One from Veeam. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.5 High severity
ONE: Authentication Bypass Using an Alternate Path or Channel
A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.
- 8.7 High severity
ONE: Improper Authentication
A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally.
- 8.8 High severity
One: Execution with Unnecessary Privileges
A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed.
- 8.0 High severity
One: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This attack requires user interaction and data collected from Veeam Backup & Replication.
- 9.8 Critical severity
One: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its configuration database. This may lead to remote code execution on the SQL server hosting the Veeam ONE configuration da