Veeam One Reporter — known CVE vulnerabilities

Every CVE whose affected-product data names Veeam One Reporter, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-11569 — CVSS 8.8 (high): Veeam ONE Reporter 9.5.0.3201 allows CSRF.
• CVE-2019-14297 — CVSS 5.4 (medium): Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in…
• CVE-2019-14298 — CVSS 5.4 (medium): Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to addDashboard or editDashboard in CommonDataHandlerReadOn…