CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. Its EPSS score suggests a 19.1% probability of exploitation in the next 30 days.
CVE
CVE-2023-38549
Severity
MEDIUM
CVSS
5.4
EPSS
19.13%
Original NVD Description
A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by the Veeam ONE Reporting Service. Note: The criticality of this vulnerability is reduced as it requires interaction by a user with the Veeam ONE Administrator role.
Related CVEs
Other vulnerabilities affecting the same vendor(s)