An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely

A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent…

A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally

A vulnerability allowing a high-privileged user to execute arbitrary code on the server

A vulnerability allowing a low-privileged user to inject SQL and extract database contents

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account

A vulnerability allowing local privilege escalation to the Reporter service context

A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account