{"cve":"CVE-2023-27532","epss":{"score":0.81326},"kev":{"dateAdded":"2023-08-22T00:00:00+00:00","dueDate":"2023-09-12T00:00:00+00:00"},"mitre":{"cpes":[],"created":"2023-03-10T00:00:00+00:00","description":"Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2023/27xxx/CVE-2023-27532.json","references":["https://www.veeam.com/kb4424"],"title":null,"updated":"2025-10-21T23:15:24.077000+00:00","vendors":[],"weaknesses":["CWE-306"]},"nvd":{"cpes":["cpe:2.3:a:veeam:veeam_backup_\\&_replication:*:*:*:*:*:*:*:*","cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:-:*:*:*:*:*:*","cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:p20211123:*:*:*:*:*:*","cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:p20211211:*:*:*:*:*:*","cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:p20220302:*:*:*:*:*:*","cpe:2.3:a:veeam:veeam_backup_\\&_replication:12.0.0.1420:-:*:*:*:*:*:*"],"created":"2023-03-10T22:15:10.557000+00:00","description":"Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cvssV4_0":{}},"nvd_repo_path":"2023/CVE-2023-27532.json","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27532","https://www.veeam.com/kb4424"],"title":null,"updated":"2026-06-17T05:45:24.980000+00:00","vendors":["veeam","veeam$PRODUCT$veeam_backup_\\&_replication"],"weaknesses":["CWE-306"]},"opencve":{"changes":[{"created":"2025-01-28T22:15:00+00:00","data":[{"details":{"added":{"kev":{"dateAdded":"2023-08-22"},"ssvc":{"options":{"Automatable":"yes","Exploitation":"active","Technical Impact":"partial"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"6f89253a-0972-4f54-9e7c-0cb71163b621"},{"created":"2025-03-13T20:00:00+00:00","data":[{"details":{"added":["cpe:2.3:a:veeam:veeam_backup_\\&_replication:*:*:*:*:*:*:*:*"],"removed":["cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:*:*:*:*:*:*:*"]},"type":"cpes"}],"id":"a6386b17-4fa0-432a-8970-3346d7459f95"},{"created":"2025-07-16T13:45:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"epss":{"new":{"score":0.7697},"old":{"score":0.76645}}}},"type":"metrics"}],"id":"fd7df6a4-269b-4f2a-8538-2c80d7b7119b"},{"created":"2025-10-21T19:30:00+00:00","data":[{"details":{"added":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27532"],"removed":[]},"type":"references"}],"id":"fd906416-e74a-49f4-b93c-9343fff9a3ea"},{"created":"2025-10-21T20:30:00+00:00","data":[{"details":{"added":[],"removed":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27532"]},"type":"references"}],"id":"2559852a-a68d-4e7c-b294-9a7a7580c13f"},{"created":"2025-10-22T00:15:00+00:00","data":[{"details":{"added":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27532"],"removed":[]},"type":"references"}],"id":"e81ac580-bd88-4ebf-8d6e-9d412a1291d2"}],"cpes":{"data":["cpe:2.3:a:veeam:veeam_backup_\\&_replication:*:*:*:*:*:*:*:*","cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:-:*:*:*:*:*:*","cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:p20211123:*:*:*:*:*:*","cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:p20211211:*:*:*:*:*:*","cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:p20220302:*:*:*:*:*:*","cpe:2.3:a:veeam:veeam_backup_\\&_replication:12.0.0.1420:-:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2023-03-10T00:00:00+00:00","provider":"mitre"},"description":{"data":"Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"provider":"vulnrichment"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.81326},"provider":"first"},"kev":{"data":{"dateAdded":"2023-08-22T00:00:00+00:00","dueDate":"2023-09-12T00:00:00+00:00"},"provider":"cisa"},"ssvc":{"data":{"options":{"Automatable":"yes","Exploitation":"active","Technical Impact":"partial"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27532","https://www.veeam.com/kb4424"],"providers":["mitre","nvd","vulnrichment"]},"title":{"data":null,"provider":null},"updated":{"data":"2025-11-03T18:06:27.833000+00:00","provider":"nvd"},"vendors":{"data":["veeam","veeam$PRODUCT$veeam_backup_\\&_replication"],"providers":["nvd"]},"weaknesses":{"data":["CWE-306"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2023-03-10T00:00:00+00:00","description":"Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cvssV4_0":{},"kev":{"dateAdded":"2023-08-22"},"ssvc":{"options":{"Automatable":"yes","Exploitation":"active","Technical Impact":"partial"},"version":"2.0.3"}},"references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27532"],"title":null,"updated":"2025-01-28T21:19:05.317000+00:00","vendors":[],"vulnrichment_repo_path":"2023/27xxx/CVE-2023-27532.json","weaknesses":[]}}