Recovery Orchestrator Security Vulnerabilities and Issues — Recovery Orchestrator CVE List

Lucene search

VeeamRecovery Orchestrator

3 matches found

CVE•added 2024/06/11 4:15 a.m.•133 views

CVE-2024-29855

Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator

9CVSS7.2AI score0.15351EPSS

CVE•added 2024/02/07 1:15 a.m.•54 views

CVE-2024-22022

Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to access the NTLM hash of the service account used by the Veeam Orchestrator Server Service.

8.8CVSS8.5AI score0.00489EPSS

CVE•added 2024/02/07 1:15 a.m.•52 views

CVE-2024-22021

Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope other than the one they are assigned to.

6.5CVSS6.5AI score0.00255EPSS