CVE-2024-40714highCWE-295

CVE-2024-40714: high-severity vulnerability in Veeam Backup and Recovery

Published · Updated

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.3epss 0.4%
exploitation probability
0.4%top 73% of all CVEs
observed exploitation
nono source reports it
An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive credentials during restore operations.
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Veeam · Backup and Recovery
Related CVEs — Veeam Backup and Recovery

In the same product, most dangerous first.

CVE-2025-23121CRITICALCVE-2025-23121EPSS 24.2%CVE-2025-23120CRITICALCVE-2025-23120EPSS 24.0%CVE-2025-24286HIGHCVE-2025-24286EPSS 19.1%CVE-2025-59470CRITICALCVE-2025-59470EPSS 1.5%CVE-2024-40710HIGHCVE-2024-40710EPSS 1.1%CVE-2025-59468CRITICALCVE-2025-59468EPSS 1.0%
References
https://www.veeam.com/kb4649