GCVE-110-NCSC-2024-359

Advisory Published

Vulnetix · Advisory published September 6, 2024

Veeam heeft kwetsbaarheden verholpen in diverse producten, zoals Backup & Replication, ONE, Service Provider Console en Agent.

Download JSON Open in Console

Weaknesses (CWE)

CWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-284Improper Access ControlCWE-434Unrestricted Upload of File with Dangerous TypeCWE-275-CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-287Improper AuthenticationCWE-295Improper Certificate ValidationCWE-918Server-Side Request Forgery (SSRF)CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Aliases

CVE-2024-38650 CVE-2024-38651 CVE-2024-39714 CVE-2024-39715 CVE-2024-39718 CVE-2024-40709 CVE-2024-40710 CVE-2024-40711 CVE-2024-40712 CVE-2024-40713 CVE-2024-40714 CVE-2024-40718 CVE-2024-42019 CVE-2024-42020 CVE-2024-42021 CVE-2024-42022 CVE-2024-42024

References

advisory

exploit

advisory

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON