What the vulnerability does
01Description
A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the network and get information about internal resources.
CVSS base score
6.5/10
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Key dates
02Disclosure timeline
December 4, 2024
CVE published
March 13, 2025
Record updated
External resources
