Vendor
Veeam
108 known vulnerabilities in products by Veeam, 4 of them actively exploited (CISA KEV).
Key figures
108
Vulnerabilities
4
Actively exploited (KEV)
4
Used by ransomware
38
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-40711 | Veeam Backup and Replication Deserialization Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2023-27532 | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability In CISA KEVRansomware | 7.5 | |
| Critical | CVE-2022-26501 | Veeam Backup & Replication Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2022-26500 | Veeam Backup & Replication Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2025-23121 | Veeam Backup and Recovery: Remote Code Execution | 9.9 | |
| Critical | CVE-2025-23120 | Veeam Backup and Recovery: Remote Code Execution | 9.9 | |
| Critical | CVE-2024-42448 | Veeam Service Provider Console: Remote Code Execution | 9.9 | |
| Critical | CVE-2024-29849 | Veeam Backup & Replication: security vulnerability | 9.8 | |
| Critical | CVE-2023-38547 | Veeam One: Remote Code Execution | 9.9 | |
| Critical | CVE-2020-10915 | VEEAM One Agent: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2020-10914 | VEEAM One Agent: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2024-29855 | Veeam Recovery Orchestrator: Authentication Bypass | 9.0 | |
| Critical | CVE-2023-38548 | Veeam One: security vulnerability | 9.8 | |
| High | CVE-2025-24286 | Veeam Backup and Recovery: Code Execution | 7.2 | |
| High | CVE-2024-42455 | Veeam Backup & Replication: Deserialization of Untrusted Data | 7.1 | |
| High | CVE-2020-15419 | Veeam ONE: Improper Restriction of XML External Entity Reference | 7.5 | |
| High | CVE-2024-42449 | Veeam Service Provider Console: security vulnerability | 7.1 | |
| High | CVE-2020-15418 | Veeam ONE: Improper Restriction of XML External Entity Reference | 7.5 | |
| Critical | CVE-2025-59470 | Veeam Backup and Recovery: Remote Code Execution | 9.0 | |
| Medium | CVE-2023-38549 | Veeam One: security vulnerability | 4.5 | |
| Critical | CVE-2026-21669 | Veeam Backup and Replication: Remote Code Execution | 10.0 | |
| Critical | CVE-2026-21671 | Veeam Software Appliance: Remote Code Execution | 9.1 | |
| High | CVE-2022-26504 | Veeam Backup and Recovery: Improper Authentication | 8.8 | |
| Critical | CVE-2026-21666 | Veeam Backup and Replication: Remote Code Execution | 10.0 | |
| Critical | CVE-2026-21667 | Veeam Backup and Replication: Remote Code Execution | 10.0 |