CVE-2024-45206

6.5 mediumEPSS 0.2%

Medium (6.5) in veeam veeam service provider console. EPSS 0.2% chance of exploitation in the next 30 days.

A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the network and get information about internal resources.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2024-12-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

veeam:veeam_service_provider_console

References

https://www.veeam.com/kb4649

Check your stack JSON