Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its configuration database. This may lead to remote code execution on the SQL server hosting the Veeam ONE configuration database.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 1 product
Vulnerabilidades Críticas en Veeam ONE: CVE-2023-38547 y CVE-2023-38548 Exponen Infraestructuras https://nksistemas.com/vulnerabilidades-criticas-en-veeam-one-cve-2023-38547-y-cve-2023-38548-exponen-infraestructuras/
Post summary
The article highlights the disclosure of critical vulnerabilities in Veeam ONE, specifically CVE-2023-38547 and CVE-2023-38548, without providing detailed technical data or exploitation evidence.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | veeam | one | 11.0.0.1379 | - | - |
| App | veeam | one | 11.0.1.1880 | - | - |
| App | veeam | one | 12.0.0.2498 | - | - |
| App | veeam | one | 12.0.1.2591 | - | - |