CVE-2023-38547

9.8 criticalEPSS 19%

Critical (9.8) in veeam one. EPSS 19% chance of exploitation in the next 30 days.

A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its configuration database. This may lead to remote code execution on the SQL server hosting the Veeam ONE configuration database.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2023-11-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

veeam:one

References

https://www.veeam.com/kb4508
https://www.veeam.com/kb4508

Check your stack JSON