How many Veeam veeam backup & replication CVEs are in CISA KEV?

Yes — 4 of Veeam veeam backup & replication's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Veeam veeam backup & replication vulnerabilities?

Yes — 8 of Veeam veeam backup & replication's CVEs have a known public exploit.

Which versions of Veeam veeam backup & replication are affected?

39 distinct Veeam veeam backup & replication versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Veeam veeam backup & replication CVEs?

Veeam veeam backup & replication's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-693 (Protection Mechanism Failure), CWE-502 (Deserialization of Untrusted Data), CWE-284 (Improper Access Control).

How many critical Veeam veeam backup & replication vulnerabilities are there?

Veeam veeam backup & replication has 16 critical and 21 high-severity CVEs.

What is the average severity of Veeam veeam backup & replication CVEs?

The average CVSS base score across Veeam veeam backup & replication's scored CVEs is 8.3.

veeam backup & replication Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: veeam backup & replication vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

veeam backup & replication Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

veeam backup & replication has 42 published CVE records since 2015, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 8.3.

Severity and exploitation

How the CVSS severity of veeam backup & replication's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical16

High21

Medium3

Low2

In CISA’s Known Exploited Vulnerabilities catalog

4 of veeam backup & replication's CVEs are confirmed exploited in the wild.

Public exploits

8 of veeam backup & replication's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every veeam backup & replication version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

12.0.0.1402 <= v < 12.3.0.3108 CVEs
< 12.2.0.3345 CVEs
< 12.1.2.1724 CVEs
11.0.1.1261 <= v <= 11.0.1.12614 CVEs
13.0.0.4967 <= v < 13.0.1.10714 CVEs
10.0.0.4442 <= v < 10.0.1.48543 CVEs
10.0.1.4854 <= v <= 10.0.1.48543 CVEs
11.0.0.825 <= v < 11.0.1.12613 CVEs
12.0.0.1402 <= v < 12.3.2.44653 CVEs
< 12.3.2.36172 CVEs
12.0.0.1402 <= v < 12.3.2.4165

Common weakness types

The CWE weakness categories most often found in veeam backup & replication CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many veeam backup & replication CVEs were published each year.

2015

2020

2021

2022

2023

2024

2025

Other Veeam products

Browse vulnerabilities for other products by Veeam.

one22 CVEs Backup and Replication21 CVEs Backup and Recovery14 CVEs Service Provider Console14 CVEs Backup & Replication13 CVEs backup_\&_replication6 CVEs Veeam Service Provider Console6 CVEs

Frequently asked questions

Common questions about veeam backup & replication vulnerabilities.

How many CVEs does Veeam veeam backup & replication have?: Veeam veeam backup & replication has 42 published CVE records since 2015.
How many Veeam veeam backup & replication CVEs are in CISA KEV?: Yes — 4 of Veeam veeam backup & replication's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Veeam veeam backup & replication vulnerabilities?: Yes — 8 of Veeam veeam backup & replication's CVEs have a known public exploit.
Which versions of Veeam veeam backup & replication are affected?: 39 distinct Veeam veeam backup & replication versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Veeam veeam backup & replication CVEs?: Veeam veeam backup & replication's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-693 (Protection Mechanism Failure), CWE-502 (Deserialization of Untrusted Data), CWE-284 (Improper Access Control).
How many critical Veeam veeam backup & replication vulnerabilities are there?: Veeam veeam backup & replication has 16 critical and 21 high-severity CVEs.
What is the average severity of Veeam veeam backup & replication CVEs?: The average CVSS base score across Veeam veeam backup & replication's scored CVEs is 8.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track veeam backup & replication vulnerabilities

Get an alert for each new veeam backup & replication CVE, with AI-written analysis and remediation steps.

Create an account See pricing

veeam backup & replication Vulnerabilities