CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 04/12/2024 |
| CVE-2024-40717 | 高8.8 | A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code execution (RCE) by updating existing jobs. These jobs can be configured to run pre- and post-scripts, which can be located on a network share and are executed with elevated privileges by default. The use | 04/12/2024 |
| CVE-2024-40715 | 高7.7 | A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attackers must be able to perform Man-in-the-Middle (MITM) attack to exploit this vulnerability. | 07/11/2024 |
| CVE-2024-40714 | 高8.3 | An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive credentials during restore operations. | 07/09/2024 |
| CVE-2024-40713 | 高7.8 | A vulnerability that allows a user who has been assigned a low-privileged role within Veeam Backup & Replication to alter Multi-Factor Authentication (MFA) settings and bypass MFA. | 07/09/2024 |
| CVE-2024-40712 | 高7.8 | A path traversal vulnerability allows an attacker with a low-privileged account and local access to the system to perform local privilege escalation (LPE). | 07/09/2024 |
| CVE-2024-40711KEV | 緊急9.8 | A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE). | 07/09/2024 |
| CVE-2024-40710 | 高8.8 | A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service account and extraction of sensitive information (savedcredentials and passwords). Exploiting these vulnerabilities requires a user who has been assigned a low-privileged role within Veeam Backup & Rep | 07/09/2024 |
| CVE-2024-39718 | 高8.1 | An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system with permissions equivalent to those of the service account. | 07/09/2024 |
| CVE-2024-29852 | 低2.7 | Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs. | 22/05/2024 |
| CVE-2024-29851 | 高7.2 | Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account. | 22/05/2024 |
| CVE-2024-29850 | 高8.8 | Veeam Backup Enterprise Manager allows account takeover via NTLM relay. | 22/05/2024 |
| CVE-2024-29849 | 緊急9.8 | Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface. | 22/05/2024 |
| CVE-2023-27532KEV | 高7.5 | Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts. | 10/03/2023 |
| CVE-2022-26504 | 高8.8 | Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM) allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe | 17/03/2022 |
| CVE-2022-26501KEV | 緊急9.8 | Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2). | 17/03/2022 |
| CVE-2022-26500KEV | 高8.8 | Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code. | 17/03/2022 |
| CVE-2021-35971 | 緊急9.8 | Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507 mishandles deserialization during Microsoft .NET remoting. | 30/06/2021 |