Vulnerabilities > Acronis > Agent > c21.10
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-08-31 | CVE-2023-41742 | Exposure of Resource to Wrong Sphere vulnerability in Acronis Agent and Cyber Protect Excessive attack surface due to binding to an unrestricted IP address. | 7.5 |
| 2023-05-18 | CVE-2022-45450 | Files or Directories Accessible to External Parties vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure and manipulation due to improper authorization. | 7.5 |
| 2023-05-18 | CVE-2022-45457 | Improper Certificate Validation vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure and manipulation due to improper certification validation. | 7.5 |
| 2023-05-18 | CVE-2022-45458 | Improper Certificate Validation vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure and manipulation due to improper certification validation. | 7.5 |
| 2023-05-18 | CVE-2022-45459 | Incorrect Default Permissions vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure due to insecure registry permissions. | 7.5 |
| 2023-04-26 | CVE-2022-45456 | Unspecified vulnerability in Acronis Agent Denial of service due to unauthenticated API endpoint. | 7.5 |
| 2023-02-13 | CVE-2022-45454 | Incorrect Default Permissions vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure due to insecure folder permissions. | 7.5 |
| 2023-02-13 | CVE-2022-45455 | Incomplete Cleanup vulnerability in Acronis Agent, Cyber Protect and Cyber Protect Home Office Local privilege escalation due to incomplete uninstallation cleanup. | 7.8 |