CVE-2024-45206: A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the...
6.5
CVSS
Description
A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the network and get information about internal resources.
Classification
CVE ID: CVE-2024-45206
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.5
Affected Products
Vendor: Veeam
Product: Service Provider Console
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)