RO
Product
Recovery Orchestrator
3
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch
Add Recovery Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29855 | 9.0 | Jun 11 | Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator Affected: before 7.0.0.379; 7.1 before 7.1.0.230 |
| CVE-2024-22022 | 8.8 | Feb 7 | Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to access the NTLM hash of the service account used by the… Affected: before 7.0 |
| CVE-2024-22021 | 4.3 | Feb 7 | Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope other than the one they are assigned… Affected: 6.0 |
Showing 3