Vulnerabilities > Acronis > Cyber Backup

DATE CVE VULNERABILITY TITLE RISK
2023-05-03 CVE-2022-30995 Improper Authentication vulnerability in Acronis Cyber Backup and Cyber Protect
Sensitive information disclosure due to improper authentication.
network
low complexity
acronis CWE-287
7.5
2023-05-03 CVE-2022-3405 Unspecified vulnerability in Acronis Cyber Backup and Cyber Protect
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.
low complexity
acronis
8.8
2020-10-21 CVE-2020-10138 Improper Initialization vulnerability in Acronis Cyber Backup and Cyber Protect
Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\.
local
low complexity
acronis CWE-665
7.2
2020-09-21 CVE-2020-16171 Server-Side Request Forgery (SSRF) vulnerability in Acronis Cyber Backup 12.5
An issue was discovered in Acronis Cyber Backup before 12.5 Build 16342.
network
low complexity
acronis CWE-918
6.4