Back to Database
Status published
Medium
CVE-2024-22021
Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope...
Vulnerability Description
Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope other than the one they are assigned to.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-22021
Credits & Attribution
No credits recorded in the NVD database.
References
More from Veeam
View All →CVE-2025-59470
This vulnerability allows a Backup Operator to perform remote code...
Critical
9
CVE-2025-59469
This vulnerability allows a Backup or Tape Operator to write...
Critical
9
CVE-2025-59468
This vulnerability allows a Backup Administrator to perform remote code...
Critical
9
CVE-2025-55125
This vulnerability allows a Backup or Tape Operator to perform...
High
7.8
CVE-2025-48984
A vulnerability allowing remote code execution (RCE) on the Backup...
Unknown
0
Affected Vendor
Veeam
View all reports →Affected Software
Recovery Orchestrator , Disaster Recovery Orchestrator, Availability Orchestrator, Recovery Orchestrator
Vulnerable Versions:
6, 5, 4, 7
Timeline
Official Publish:
February 7th, 2024
Last Modified:
March 2nd, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.