Product by Veeam
Veeam One
22 known vulnerabilities in Veeam One (Veeam), 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-38547 | Veeam One: Remote Code Execution | 9.9 | |
| Critical | CVE-2020-10915 | VEEAM One Agent: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2020-10914 | VEEAM One Agent: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2023-38548 | Veeam One: security vulnerability | 9.8 | |
| High | CVE-2020-15419 | Veeam ONE: Improper Restriction of XML External Entity Reference | 7.5 | |
| High | CVE-2020-15418 | Veeam ONE: Improper Restriction of XML External Entity Reference | 7.5 | |
| Medium | CVE-2023-38549 | Veeam One: security vulnerability | 4.5 | |
| Medium | CVE-2023-41723 | Veeam One: security vulnerability | 4.3 | |
| Critical | CVE-2026-64633 | Veeam ONE: Code Injection | — | |
| Critical | CVE-2024-42024 | Veeam One: Remote Code Execution | 9.1 | |
| Critical | CVE-2026-65641 | Veeam One: Authentication Bypass Using an Alternate Path or Channel | — | |
| High | CVE-2026-58074 | Veeam ONE: Code Injection | — | |
| High | CVE-2026-58075 | Veeam ONE: Improper Authentication | — | |
| High | CVE-2026-64631 | Veeam ONE: SQL Injection | — | |
| High | CVE-2026-64632 | Veeam ONE: Insufficiently Protected Credentials | — | |
| Critical | CVE-2024-42019 | Veeam One: security vulnerability | 9.0 | |
| High | CVE-2026-64634 | Veeam ONE: Improper Privilege Management | — | |
| High | CVE-2024-42023 | Veeam One: Improper Access Control | 7.8 | |
| Medium | CVE-2026-64630 | Veeam ONE: Incorrect Authorization | — | |
| High | CVE-2024-42020 | Veeam One: Cross-Site Scripting (XSS) | 7.3 | |
| High | CVE-2024-42021 | Veeam One: Improper Access Control | 7.5 | |
| High | CVE-2024-42022 | Veeam One: security vulnerability | 7.5 |