CVE-2022-32225: Veeam Management Pack

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

A reflected DOM-Based XSS vulnerability has been discovered in the Help directory of Veeam Management Pack for Microsoft System Center 8.0. This vulnerability could be exploited by an attacker by convincing a legitimate user to visit a crafted URL on a Veeam Management Pack for Microsoft System Center server, allowing for the execution of arbitrary scripts.

Affected products

  • Veeam Management Pack: version 8.0 only

Published 2022-07-14. Last modified 2026-06-17.