AVEVA Software, LLC. Security Vulnerabilities

Veeam Repair/Reinstall/Update fails with "The following SQL database patches are missed"

When attempting to repair, reinstall, or update Veeam Backup & Replication the process may fail with "The following SQL database patches are missed." This article discusses the cause and effective methods to work around this...

Replication job to VMware Virtual Volumes (VVols) fails with VDDK error: 7 (A file access error occurred on the host or guest operating system)

Replication job to a VVOL target will fail with the error below:Task..vm- will contain following error:[TIMESTAMP] <21> Info [AP] (5e06)...

Deduplication Appliance Best Practices

This article provides links to documentation regarding the optimal configuration of Veeam Backup & Replication when using deduplicated storage and provides generalized configuration...

Veeam Data Cloud Authentication Error

Veeam Data Cloud Authentication...

Release Information for Dell PowerMax Plug-In for Veeam Backup & Replication

Release Information for Dell PowerMax Plug-In for Veeam Backup &...

Veeam Agent for Solaris Skips Hidden ZFS Snapshots

Veeam Agent for Oracle Solaris cannot back up hidden ZFS snapshots that are explicitly specified as a source for...

Release Information for Veeam Service Provider Console 7 Cumulative Patches

Release Information for Veeam Service Provider Console 7 Cumulative...

VM Disks Support for oVirt Incremental Backup

Backup warning: "Unable to enabled ovirt incremental backups for disk. Full scan backups will be...

Veeam repository update fails, GPG key error

Veeam repository GPG key has...

How to Reinstall the Veeam Transport Service on a Linux Server

This article documents the procedure for redeploying the Veeam Transport (Data Mover) Service on a Linux server managed by Veeam Backup & Replication without removing it from Veeam Backup &...

Build Numbers and Versions of Veeam Service Provider Console

Build Numbers and Versions of Veeam Service Provider...

Antivirus Exclusions for Veeam Agent for Mac

Antivirus Exclusions for Veeam Agent for...

How to Merge Veeam Data Platform Licenses

How to Merge Veeam Data Platform...

Antivirus Exclusions for Veeam Agent for Microsoft Windows

This article documents antivirus exclusions that may be created to reduce the impact that antivirus software has on the functionality of Veeam Agent for Microsoft...

CVE-2024-20358

A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with...

Veeam Service Provider Console Vulnerability ( CVE-2024-29212 )

Due to an unsafe deserialization method used by the Veeam Service Provider Console (VSPC) server in communication between the management agent and its components, under certain conditions, it is possible to perform Remote Code Execution (RCE) on the VSPC server...

Release History for Veeam Service Provider Console 8

Release History for Veeam Service Provider Console...

Microsoft Windows Start Menu Software Version Enumeration

This plugin enumerates the installed software version by interrogating information obtained from various registry entries and files on disk. This plugin provides a best guess at the software version and a confidence level for that version. Note that the versions detected here do not necessarily...

CVE-2023-25827

Due to insufficient validation of parameters reflected in error messages by the legacy HTTP query API and the logging endpoint, it is possible to inject and execute malicious JavaScript within the browser of a targeted OpenTSDB user. This issue shares the same root cause as CVE-2018-13003, a...

Antivirus Exclusions for Veeam Service Provider Console

This article documents antivirus exclusions that may be created to reduce the impact that antivirus software has on the functionality of Veeam Service Provider...

Antivirus Exclusions for Veeam ONE

This article documents antivirus exclusions that may be created to reduce the impact that antivirus software has on the functionality of Veeam...

How to Collect Logs for Veeam Backup & Replication

This article provides the details on how to collect logs for Veeam Backup &...

CVE-2023-6380

Open redirect vulnerability has been found in the Open CMS product affecting versions 14 and 15 of the 'Mercury' template. An attacker could create a specially crafted URL and send it to a specific user to redirect them to a malicious site and compromise them. Exploitation of this vulnerability is....

Apple Software Update Installed

Apple Software Update, an application used to update various Apple components, is installed on the remote host. Note that this application is distributed with Apple...

IBM Installed Software Enumeration

It was possible to enumerate installed IBM software on the remote...

VanDyke Software SecureCRT Installed

VanDyke Software SecureCRT, a terminal emulation application, is installed on the remote Windows...

CVE-2023-22745

tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2). In affected versions Tss2_RC_SetHandler and Tss2_RC_Decode both index into layer_handler with an 8 bit layer number, but the array only has...

Antivirus Exclusions for Veeam Recovery Orchestrator

This article documents antivirus exclusions that may be created to reduce the impact that antivirus software has on the functionality of Veeam Recovery...

List Installed Mac OS X Software

This plugin gathers information about all managed / packaged software installed on the remote Mac OS X...

CVE-2023-6379

Cross-site scripting (XSS) vulnerability in Alkacon Software Open CMS, affecting versions 14 and 15 of the 'Mercury' template. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload to a victim and partially take control of their browsing...

CVE-2023-28882

Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsiveness) because some inputs cause a segfault in the Transaction class for some...

Supply Chain Attack against Courtroom Software

No word on how this backdoor was installed: A software maker serving more than 10,000 courtrooms throughout the world hosted an application update containing a hidden backdoor that maintained persistent communication with a malicious website, researchers reported Thursday, in the latest episode...

Release Information for Hitachi Plug-In for Veeam Backup & Replication

Release Information for Hitachi Plug-In for Veeam Backup &...

Guest Processing for Microsoft SQL Server Results in Logon Failure Error

Assigned guest process accounts has insufficient permissions within server being backed...

Backup fails with: "The system cannot find the file specified." or "The device is not ready."

If the shadow copy fails to be created or is unexpectedly removed during the backup operation the backup job will...

Exchange Backup Fails With: "Failed to get folder properties. Not allowed to access Non IPM folder"

Due to a recent change in Microsoft 365, the properties of the ‘TeamsMessagesData’ folder cannot be retrieved using the EWS APIs currently used by Veeam Backup for Microsoft...

Veeam Agent for Microsoft Windows Vulnerability (CVE-2024-29853)

Veeam Agent for Microsoft Windows Vulnerability...

Public Folder Backup Hangs

This issue was investigated and determined to be caused by a public folder mailbox with the parameter PerUserReadStateEnabled set to...

Rocket Software UniRPC Version Detection

The remote server is a UniRPC server. Rocket Software services such as UniData and UniVerse use this RPC...

New Readiness Check - Multiple Veeam Backup Servers Are Required by One Recovery Plan

Starting in VRO 7.1, the readiness check will display a warning if a Recovery Plan would require multiple Veeam Backup & Replication (VBR)...

Release Information for Veeam Backup & Replication 11a Cumulative Patches

Release Information for Veeam Backup & Replication 11a Cumulative...

Build Numbers and Versions of Veeam Agent for Microsoft Windows

This KB article lists all versions of Veeam Agent for Microsoft Windows and their respective build...

Build Numbers and Versions of Veeam Backup for Salesforce

Build Numbers and Versions of Veeam Backup for...

Build Numbers and Versions of Veeam Agent for Mac

This KB article lists all versions of Veeam Agent for Mac and their respective build...

Build Numbers and Versions of Veeam Backup & Replication

This KB article lists all versions of Veeam Backup & Replication and their respective build...

Movicon SCADA/HMI Software Detection

Movicon, a SCADA/HMI supervision software from Progea is installed on the remote...

Build Numbers and Versions of Veeam Agent for Linux

This KB article lists all versions of Veeam Agent for Linux and their respective build...

Build Numbers and Versions of Veeam Agent for Oracle Solaris

This KB article lists all versions of Veeam Agent for Oracle Solaris and their respective build...

List of Security Fixes and Improvements in Veeam Backup & Replication

This article describes all security-related fixes and improvements introduced in each release or update of Veeam Backup &...

Build Numbers and Versions of Veeam Plug-ins for Enterprise Applications

Build Numbers and Versions of Veeam Plug-ins for Enterprise Applications (Veeam Plug-in for SAP HANA, Veeam Plug-in for Oracle RMAN, Veeam Plug-in for SAP on Oracle, Veeam Plug-in for Microsoft SQL...