CVE-2025-23121 PUBLISHED

Assigner: hackerone
Reserved: 11.01.2025 Published: 18.06.2025 Updated: 18.06.2025

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user

Metrics

CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 9.9

Product Status

Vendor Veeam
Product Backup and Recovery
Versions Default: unaffected
  • affected from 12.3.1 to 12.3.1 (incl.)

References