Vulnerability Details CVE-2022-26504
Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM) allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.3%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
Products affected by CVE-2022-26504
-
cpe:2.3:a:veeam:veeam_backup_&_replication:10.0.0.4442
-
cpe:2.3:a:veeam:veeam_backup_&_replication:10.0.0.4461
-
cpe:2.3:a:veeam:veeam_backup_&_replication:10.0.1.4848
-
cpe:2.3:a:veeam:veeam_backup_&_replication:10.0.1.4854
-
cpe:2.3:a:veeam:veeam_backup_&_replication:11.0.0.825
-
cpe:2.3:a:veeam:veeam_backup_&_replication:11.0.0.837
-
cpe:2.3:a:veeam:veeam_backup_&_replication:11.0.1.1261
-
cpe:2.3:a:veeam:veeam_backup_&_replication:9.5.0.1536
-
cpe:2.3:a:veeam:veeam_backup_&_replication:9.5.4.2615