32 matches found
CVE-2025-64392
This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link...
CVE-2025-64392
This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link...
CVE-2025-64392
This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link...
CVE-2025-64392
CVE-2025-64392 is a reflected cross-site scripting (XSS) vulnerability in Veeam Backup Enterprise Manager . It allows an attacker to execute scripts in the browser of an authenticated portal user who opens a crafted link. This flaw affects Veeam Backup Enterprise Manager (Veeam Backup & Replicati...
EUVD-2025-211040
This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link...
PT-2026-107423
This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link...
CVE-2025-64392: Improper Neutralization of Input During Web Page Generation
This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link...
Veeam Backup and Replication < 12.3.2 (kb4934)
The version of Veeam Backup and Replication installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4934 advisory. - A reflected cross-site scripting vulnerability in Veeam Backup Enterprise Manager allows an attacker to execut...
Veeam Backup Enterprise Manager AuthorizeByVMwareSsoToken Improper Certificate Validation Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Veeam Backup Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of security tokens. The issue results from imprope...
The vulnerability in the Web Console Management Console of Veeam Backup Enterprise Manager allows a perpetrator to bypass authentication procedures.
The vulnerability of the Veeam Backup Enterprise Manager web management console relates to access to a channel from a non-endpoint location. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures...
CVE-2024-40715
A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attackers must be able to perform Man-in-the-Middle MITM attack to exploit this vulnerability...
Exploit for Improper Authentication in Veeam Veeam_Backup_\&_Replication
CVE-2024-29849 Veeam Backup Enterprise Manager Authentication...
CVE-2024-29852
Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs...
CVE-2024-29850
Veeam Backup Enterprise Manager allows account takeover via NTLM relay...
CVE-2024-29849
Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface...
Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass
Users of Veeam Backup Enterprise Manager are being urged to update to the latest version following the discovery of a critical security flaw that could permit an adversary to bypass authentication protections. Tracked as CVE-2024-29849 CVSS score: 9.8, the vulnerability could allow an...
Veeam Backup Enterprise Manager 安全漏洞
Veeam Backup Enterprise Manager is a centralized management and monitoring tool from Veeam USA. A security vulnerability exists in Veeam Backup Enterprise Manager that originates from allowing an elevated privilege user to steal NTLM hashes of service accounts...
CVE-2024-29850: Authentication Bypass by Capture-replay
Veeam Backup Enterprise Manager allows account takeover via NTLM relay...