Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest
Oops! Something went wrong. Please, try again later.
Please, try again later.
A vulnerability allowing remote unauthenticated code execution on the agent host.
Severity: Critical CVSS v4.0 Score: 10.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Source: Reported through HackerOne.
A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged to escalate privileges locally.
Severity: High CVSS v4.0 Score: 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N Source: Reported through HackerOne.
A vulnerability allowing a high-privileged user to execute arbitrary code on the server.
Severity: High CVSS v4.0 Score: 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Source: Discovered during internal testing.
A vulnerability allowing a low-privileged user to inject SQL and extract database contents.
Severity: High CVSS v4.0 Score: 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:H Source: Reported through HackerOne.
A vulnerability allowing local privilege escalation to the Reporter service context.
Severity: High CVSS v4.0 Score: 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Source: Reported through HackerOne.
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.
Severity: Medium CVSS v4.0 Score: 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N Source: Reported through HackerOne.
These vulnerabilities were fixed starting with the following build:
If this KB article did not resolve your issue or you need further assistance with Veeam software, please create a Veeam Support Case.
To submit feedback regarding this article, please click this link: Send Article Feedback To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Your feedback has been received and will be reviewed.
Please, try again later.
Please try select less .
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
Your feedback has been received and will be reviewed.
Oops! Something went wrong. Please, try again later.
Please, try again later.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
