Query Veeam Vulnerabilities

There’s a KB article for VBR: https://www.veeam.com/kb3103

If you subscribe to the KB itself via RSS, then you should also receive a notification if this article gets updates, or am I wrong?

Thanks @regnor ! This could work for VBR and Cloud Connect. But I am looking for something more general, with more structured information.

Maybe it’s just me; however, it is a bit unclear how to find the RSS feed for the page?

I fear there is no better source as this KB was created because of requests in the R&D forums. I’ve looked it up and here’s the post from Anton (there’s also a KB for the agents): https://forums.veeam.com/post362001.html#p362001

I only found out about the RSS possibility because of the post from @jorge.delacruz. But you can only subscribe to the knowledge base, not to certain articles I think.

• How to add the Veeam Knowledge Base RSS to Feedly and Microsoft Outlook

I have set a notification on some of these KBs with Visualping to get a mail if there is a change on the site.

• Tip of the Day: Monitor for v11 updates

This is not exactly what you are looking for, but it is good to recognize there is something new...

regnor wrote:

vNote42 wrote:

regnor wrote:

There’s a KB article for VBR: https://www.veeam.com/kb3103

If you subscribe to the KB itself via RSS, then you should also receive a notification if this article gets updates, or am I wrong?

Thanks @regnor ! This could work for VBR and Cloud Connect. But I am looking for something more general, with more structured information.

I fear there is no better source as this KB was created because of requests in the R&D forums. I’ve looked it up and here’s the post from Anton (there’s also a KB for the agents): https://forums.veeam.com/post362001.html#p362001

haslund wrote:

regnor wrote:

There’s a KB article for VBR: https://www.veeam.com/kb3103

If you subscribe to the KB itself via RSS, then you should also receive a notification if this article gets updates, or am I wrong?

Maybe it’s just me; however, it is a bit unclear how to find the RSS feed for the page?

I only found out about the RSS possibility because of the post from @jorge.delacruz. But you can only subscribe to the knowledge base, not to certain articles I think.

• How to add the Veeam Knowledge Base RSS to Feedly and Microsoft Outlook

 

 

Thanks, but I am afraid this isn’t what I am looking for.

JMeixner wrote:

I have set a notification on some of these KBs with Visualping to get a mail if there is a change on the site.

• Tip of the Day: Monitor for v11 updates

 

Thanks Joe! Already thought about this option. But I am afraid it is too error-prone to read out the information out of the output.

@vNote42 we don’t have something directly equivalent as the VMware page. I’m going to send this to the security team and see if A) we already have something like this existing or B) do we have it planned.

Will revert!

@Rick Vanover  thank you for your efforts!

No, thank you Wolfgang. I think the page you reference is a great resource, I have sent it over to the security team.

Interesting topic indeed.  If there is something eventually I will pass it to our Security team as well.

For current active vulnerabilities (after authorization from customer), you can use software like Nessus, Qualys or Openvas for third party cve. But this is another IT field, like pentest and vulnscan :)

Got an update here on this everyone.  I can confirm this is an initiative underway as we speak. We'll share it here and other vehicles when the mechanism is in place. 

This would be a great secret to share in the weekly recap when it is live @vNote42 and others - as we’ll beat Anton to the news that comes in the Sunday digest. Friday for the win!

Thanks for the update Rick! Very brave going against the WORD from Gostev!

@vNote42 Hannes posted a RSS feed for security updates in the R&D forums, is this any help to you? https://www.veeam.com/services/open/kb/security-feed

@jorge.delacruz Perhaps you would want to add the URL to your topic?

Thanks a lot, @regnor for posting this link! I would have missed it otherwise.