Approved changes feed: RSS · Atom

cpe:2.3:a:veeam:one:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVeeam (203dc226-d9ed-503f-8231-d4e4e702036f)
ProductOne (56636c1b-fbe3-54fa-9354-ab77f4254dde)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42024 vulnerable 2026-06-08 06:43:55.984475 Details available
CRITICAL (9.1)
A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed.
Published: 2024-09-07T16:11:22.220Z
Updated: 2024-09-09T14:11:39.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42023 vulnerable 2026-06-08 06:43:55.984055 Details available
HIGH (7.8)
An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely.
Published: 2024-09-07T16:11:22.238Z
Updated: 2024-09-09T13:36:19.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42022 vulnerable 2026-06-08 06:43:55.983634 Details available
HIGH (7.5)
An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.
Published: 2024-09-07T16:11:22.220Z
Updated: 2024-09-09T14:15:21.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42021 vulnerable 2026-06-08 06:43:55.983353 Details available
HIGH (7.5)
An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.
Published: 2024-09-07T16:11:22.333Z
Updated: 2024-09-09T13:33:58.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42020 vulnerable 2026-06-08 06:43:55.983044 Details available
HIGH (7.3)
A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection.
Published: 2024-09-07T16:11:22.194Z
Updated: 2024-10-27T14:31:53.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42019 vulnerable 2026-06-08 06:43:55.982656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41723 vulnerable 2026-06-08 06:11:06.802542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38549 vulnerable 2026-06-08 06:08:18.273699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38548 vulnerable 2026-06-08 06:08:18.273284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38547 vulnerable 2026-06-08 06:08:18.269493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15419 vulnerable 2026-06-08 05:19:25.900293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15418 vulnerable 2026-06-08 05:19:25.898590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.