Veeam ONE güvenlik açıkları (CVE)

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.

A vulnerability allowing local privilege escalation to the Reporter service context.

A vulnerability allowing a low-privileged user to inject SQL and extract database contents.

A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally.

A vulnerability allowing a high-privileged user to execute arbitrary code on the server.