CVE-2023-27532

State: Published
Severity: 7.5 High
Published: Mar 10, 2023
Updated: Oct 21, 2025
Reserved: Mar 2, 2023

Description

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	CISA-ADP

Weaknesses

CWE-306 Missing Authentication for Critical Function (CWE-306)

Affected Products

Product	Versions
Veeam Backup & Replicationn/a	Fixed Versions: v12 (build 12.0.0.1420 P20230223)Affected 11a (build 11.0.1.1261 P20230227)Affected

References

https://www.veeam.com/kb4424
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27532government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.