Service Provider Console
Approved changes feed: RSS · Atom
cpe:2.3:a:veeam:service_provider_console:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Veeam (203dc226-d9ed-503f-8231-d4e4e702036f) |
|---|---|
| Product | Service Provider Console (41725fc1-4a71-5b89-9c55-9e496f230b04) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-64635 |
vulnerable | 2026-09-16 04:33:11.019227 |
Details available
MEDIUM (5.3)
Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to an attacker-controlled host, allowing the attacker to take over the account.
Published: 2026-07-30T06:02:49.984Z
Updated: 2026-07-30T12:44:36.592Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58071 |
vulnerable | 2026-09-16 04:32:42.853472 |
Details available
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins.
Published: 2026-08-04T15:56:03.345Z
Updated: 2026-08-04T17:20:39.237Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58073 |
vulnerable | 2026-09-16 04:32:42.707237 |
Details available
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.
Published: 2026-08-04T15:56:03.546Z
Updated: 2026-08-05T03:57:08.825Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58067 |
vulnerable | 2026-09-16 04:32:42.550843 |
Details available
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service.
Published: 2026-08-04T15:56:03.330Z
Updated: 2026-08-04T17:20:55.769Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58072 |
vulnerable | 2026-09-16 04:32:42.446426 |
Details available
A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.
Published: 2026-08-04T15:56:03.652Z
Updated: 2026-08-05T03:57:05.326Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32998 |
vulnerable | 2026-06-08 07:57:18.433905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45206 |
vulnerable | 2026-06-08 06:45:55.598328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42449 |
vulnerable | 2026-06-08 06:45:46.425047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42448 |
vulnerable | 2026-06-08 06:45:46.424450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39715 |
vulnerable | 2026-06-08 06:41:51.443353 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39714 |
vulnerable | 2026-06-08 06:41:51.443010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38651 |
vulnerable | 2026-06-08 06:41:47.840739 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38650 |
vulnerable | 2026-06-08 06:41:47.839393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29212 |
vulnerable | 2026-06-08 06:33:29.015902 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.