ON
Product
One
21
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 5High 9Medium 7Low 0
Watch
Add One to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-42021 | 6.5 | Sep 7 | An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials Affected: 12.1 through 12.1 |
| CVE-2024-42020 | 5.4 | Sep 7 | A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection Affected: 12.1 through 12.1 |
| CVE-2023-38549 | 5.4 | Nov 7 | A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by the Veeam ONE… Affected: 11.0.0.1379; 11.0.1.1880; 12.0.0.2498; 12.0.1.2591 |
| CVE-2026-64630 | 5.3 | Aug 4 | A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link Affected: through 13.0.2 |
| CVE-2024-42022 | 5.3 | Sep 7 | An incorrect permission assignment vulnerability allows an attacker to modify product configuration files Affected: 12.1 through 12.1 |
| CVE-2023-41723 | 4.3 | Nov 7 | A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule Affected: 11.0.0.1379; 11.0.1.1880; 12.0.0.2498; 12.0.1.2591 |
| CVE-2023-38548 | 4.3 | Nov 7 | A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by the Veeam ONE… Affected: 12.0.0.2498; 12.0.1.2591 |
Showing 7