CVE Vulnerabilities

CVE-2023-38547

Published: Nov 07, 2023 | Modified: Nov 14, 2023
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its configuration database. This may lead to remote code execution on the SQL server hosting the Veeam ONE configuration database.

Affected Software

Name Vendor Start Version End Version
One Veeam 11.0.0.1379 (including) 11.0.0.1379 (including)
One Veeam 11.0.1.1880 (including) 11.0.1.1880 (including)
One Veeam 12.0.0.2498 (including) 12.0.0.2498 (including)
One Veeam 12.0.1.2591 (including) 12.0.1.2591 (including)

References