CVE-2023-41723

Medium

Description

A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note: The criticality of this vulnerability is reduced because the user with the Read-Only role is only able to view the schedule and cannot make changes.

SeverityMedium
CVSS4.3
Exploit probability—
ProductVeeam One
PublishedNov 7, 2023
First seenNov 7, 2023
Weakness typeCWE-922CWE-922

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
veeam one11.0.0.1379, 11.0.1.1880, 12.0.0.2498, 12.0.1.2591—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.