Vulnerabilities > Veeam > Recovery Orchestrator

DATE CVE VULNERABILITY TITLE RISK
2024-02-07 CVE-2024-22021 Unspecified vulnerability in Veeam products
Vulnerability?CVE-2024-22021 allows?a?Veeam Recovery Orchestrator user with a low?privileged?role (Plan?Author)?to retrieve?plans?from?a?Scope other than the one they are assigned to.
network
low complexity
veeam
4.3
2024-02-07 CVE-2024-22022 Unspecified vulnerability in Veeam Recovery Orchestrator
Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to access the NTLM hash of the service account used by the Veeam Orchestrator Server Service.
network
low complexity
veeam
8.8