Assignment of the ApplicationImpersonation Role Fails With Error

Challenge In Microsoft 365 organizations using modern app-only authentication, an attempt to assign the ApplicationImpersonation role, which is required for data restore with Veeam Explorer for Microsoft Exchange , fails with the following error:...

CVE-2025-23082

Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-23082

Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-23082

Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-23082

Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-23082

CVE-2025-23082 affects Veeam Backup for Microsoft Azure. The flaw is an SSRF vulnerability that could allow an unauthenticated attacker to send unauthorized requests from the system, potentially enabling network enumeration. Public details in the Veeam KB indicate the issue impacts Veeam Backup f...

Veeam Backup 代码问题漏洞

Veeam Backup is a backup software from Veeam USA. A code issue vulnerability exists in Veeam Backup versions prior to 7.1.0.59 that stems from vulnerability to server-side request forgery SSRF attacks, which could allow an unauthenticated attacker to send unauthorized requests from the system...

Veeam Backup for Microsoft Azure Vulnerability - CVE-2025-23082

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

Using Veeam Agents with Xen Orchestra (Vates XCP-NG and XenServer)

Purpose This article documents how to use Veeam Agent for Microsoft Windows and Veeam Agent for Linux , managed by Veeam Backup & Replication, to protect virtual machines in XenServer and XCP-NG environments that are managed by Xen Orchestra. While these hypervisors are not directly supported for...

PT-2025-4812 · Veeam · Veeam Backup For Microsoft Azure

Name of the Vulnerable Software and Affected Versions: Veeam Backup for Microsoft Azure versions prior to 7.1.0.59 Description: Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the...

Release History for Veeam ONE version 12

Veeam ONE v12 Releases 12.3.0.4670 2024-12-03 Release Notes What's New Download Veeam ONE 12.3.0.4670 12.2.0.4093 2024-08-28 Release Notes What's New Download Veeam ONE 12.2.0.4093 12.1.0.3208 2023-12-05 Release Notes What's New User Guide Archive Download Veeam ONE 12.1.0.3208 12.0.1.2591...

The vulnerability of the Veeam Agent for Microsoft Windows data backup tool lies in the use of an unreliable search path, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Veeam Agent for Microsoft Windows data backup tool is related to the use of an unreliable search path. Exploiting this vulnerability allows attackers to execute arbitrary code by introducing malicious DLL libraries...

Veeam Product Upgrade Guides

Upgrade Guides This article provides a list with links to the upgrade guides available within each product's user guide. Veeam Data Platform Veeam Backup & Replication Veeam ONE Veeam Recovery Orchestrator Veeam Plug-ins for Enterprise Applications Veeam Plug-in for SAP HANA Veeam Plug-in for...

Granular sudo Permissions for Installing Veeam Plug-ins for Enterprise Applications using Protection Groups

Challenge This article provides an example granular 'sudoer' configuration for the Linux account that will be used by Veeam Backup & Replication when installing Veeam Plug-Ins for Enterprise Applications using a Protection Group, specifically for Veeam Plug-in for Oracle RMAN and Veeam Plug-in fo...

The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems lies in the fact that confidential information is stored in an open manner, allowing attackers to disclose the protected data.

The vulnerability of the Veeam Backup & Replication protection tool for cloud, virtual, and physical systems lies in the storage of confidential information in an open manner. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Vulnerability of Veeam Backup & Replication virtual and physical systems, due to authentication procedures that lack sufficient protection. This allows attackers to alter multi-factor authentication parameters and circumvent existing security restrictions.

The vulnerability of virtual and physical systems managed by Veeam Backup & Replication is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to alter the parameters of Multi-Factor Authentication MFA and circumvent existing security...

The vulnerability in virtual and physical systems of Veeam Backup & Replication lies in the insufficient protection of registration data, allowing attackers to execute arbitrary codes.

The vulnerability of virtual and physical systems managed by Veeam Backup & Replication is related to insufficient protection of registration data. Exploiting these vulnerabilities could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the Veeam Agent for Linux data backup tool lies in the absence of an authentication procedure, which allows attackers to elevate their privileges to the root level.

The vulnerability of the Veeam Agent for Linux data backup tool is related to the absence of an authentication process. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

The vulnerability of Veeam Backup & Replication’s virtual and physical systems arises from the limited ability to restrict the path name to the restricted access directory. This allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of Veeam Backup & Replication virtual and physical systems is related to the limited ability to access the directory. Exploiting this vulnerability can allow a malicious actor to influence the integrity and accessibility of the protected information...

Vulnerability of Veeam Backup & Replication virtual and physical systems, related to incorrect verification of the TLS certificate, allows attackers to execute a “man-in-the-middle” attack.

The vulnerability in Veeam Backup & Replication and physical systems exists due to incorrect verification of the TLS certificate. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...