CVE-2020-15418

CVE-2020-15418 affects Veeam ONE 10.0.0.750_20200415 and is caused by improper handling of XML External Entities in the SSRSReport class, allowing an unauthenticated attacker to disclose arbitrary file contents (context: SYSTEM) via specially crafted XML. The issue is corroborated by multiple sou...

CVE-2020-15419

CVE-2020-15419 affects Veeam ONE, specifically the Reporter_ImportLicense XML processing. The issue is an XML External Entity (XXE) vulnerability that allows remote attackers, without authentication, to read arbitrary files in the SYSTEM context via a crafted document, as described by Red Hat, NV...