How many Veeam Backup and Replication CVEs are in CISA KEV?

None of Veeam Backup and Replication's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Veeam Backup and Replication vulnerabilities?

Yes — 1 of Veeam Backup and Replication's CVEs have a known public exploit.

Which versions of Veeam Backup and Replication are affected?

18 distinct Veeam Backup and Replication versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Veeam Backup and Replication CVEs?

Veeam Backup and Replication's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-284 (Improper Access Control), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-502 (Deserialization of Untrusted Data).

How many critical Veeam Backup and Replication vulnerabilities are there?

Veeam Backup and Replication has 7 critical and 11 high-severity CVEs.

What is the average severity of Veeam Backup and Replication CVEs?

The average CVSS base score across Veeam Backup and Replication's scored CVEs is 8.6.

Veeam Backup and Replication Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Veeam Backup and Replication vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Veeam Backup and Replication Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Veeam Backup and Replication has 21 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.6.

Severity and exploitation

How the CVSS severity of Veeam Backup and Replication's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical7

High11

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Veeam Backup and Replication's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of Veeam Backup and Replication's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Veeam Backup and Replication version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

12 <= v < 12.3.23 CVEs
12.0 <= v <= 12.2.0.3343 CVEs
12.3.2 <= v < 12.3.23 CVEs
12 <= v < 12.3.2.49342 CVEs
12.3.2 <= v <= 12.3.22 CVEs
13 <= v < 13.0.12 CVEs
13 <= v <= 13.0.12 CVEs
13.0.1 <= v < 13.0.12 CVEs
< 12.3.21 CVE
< 13.0.31 CVE
12 <= v <= 12.3.21 CVE

Common weakness types

The CWE weakness categories most often found in Veeam Backup and Replication CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Veeam Backup and Replication CVEs were published each year.

2024

2025

2026

Other Veeam products

Browse vulnerabilities for other products by Veeam.

veeam backup & replication42 CVEs one22 CVEs Backup and Recovery14 CVEs Service Provider Console14 CVEs Backup & Replication13 CVEs backup_\&_replication6 CVEs Veeam Service Provider Console6 CVEs

Frequently asked questions

Common questions about Veeam Backup and Replication vulnerabilities.

How many CVEs does Veeam Backup and Replication have?: Veeam Backup and Replication has 21 published CVE records since 2024.
How many Veeam Backup and Replication CVEs are in CISA KEV?: None of Veeam Backup and Replication's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Veeam Backup and Replication vulnerabilities?: Yes — 1 of Veeam Backup and Replication's CVEs have a known public exploit.
Which versions of Veeam Backup and Replication are affected?: 18 distinct Veeam Backup and Replication versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Veeam Backup and Replication CVEs?: Veeam Backup and Replication's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-284 (Improper Access Control), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-502 (Deserialization of Untrusted Data).
How many critical Veeam Backup and Replication vulnerabilities are there?: Veeam Backup and Replication has 7 critical and 11 high-severity CVEs.
What is the average severity of Veeam Backup and Replication CVEs?: The average CVSS base score across Veeam Backup and Replication's scored CVEs is 8.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Veeam Backup and Replication vulnerabilities

Get an alert for each new Veeam Backup and Replication CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Veeam Backup and Replication Vulnerabilities