CVE-2024-40715: A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attackers must…

PriorityP350high7.7CVSS 3.0

AVNACHPRNUINSUCHIHAL

EPSS

0.61%

44.9th percentile

A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attackers must be able to perform Man-in-the-Middle (MITM) attack to exploit this vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
veeam	enterprise_manager	12.2 – 12.2	—
veeam	veeam_backup_replication	< 12.2.0.334	12.2.0.334

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.