CVE-2023-38547

CVSS 3.1: 9.8 critical
EPSS: 19%p97
Published: Nov 7, 2023 · Nov 7, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-38547 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its configuration database. This may lead to remote code execution on the SQL server hosting the Veeam ONE configuration database.

Vendors: veeam

Products: one

Weakness: CWE-200

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (18.9%)

In the news

3 stories

Description · NVD

In the news

Veeam fixed multiple flaws in Veeam ONE, including critical issues

Veeam Patches Two Critical Bugs in Veeam ONE

Critical Flaws Discovered in Veeam ONE IT Monitoring Software