CVE-2025-64392: Backup Enterprise Manager 12 to before 12.3.2.4934

Affected technology

Backup Enterprise Manager · 12 to before 12.3.2.4934
Veeam

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · Active user interaction

What an attacker can do

An attacker can execute script in the browser of a portal user who opens a crafted link. Vendor/CNA’s CVSS 4.0 assessment (base score 4.8/10) rates confidentiality, integrity and availability impact as none.