CVE-2023-27532

CVE-2023-27532

Vendor N/A
Product Veeam Backup & Replication
Weakness CWE-306 · Missing auth
KEV Status Known Exploited
Ransomware Used in campaigns
Published March 10, 2023
Last update October 21, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.

CISA mandated remediation

02CISA Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Key dates

03Disclosure timeline

March 10, 2023 CVE published
October 21, 2025 Record updated