Vulnerabilities > Acronis > Cyber Protect > 15

DATE CVE VULNERABILITY TITLE RISK
2023-09-27 CVE-2023-44153 Cleartext Storage of Sensitive Information vulnerability in Acronis Cyber Protect 15
Sensitive information disclosure due to cleartext storage of sensitive information in memory.
network
low complexity
acronis CWE-312
7.5
7.5
2023-09-27 CVE-2023-44154 Authorization Bypass Through User-Controlled Key vulnerability in Acronis Cyber Protect 15
Sensitive information disclosure and manipulation due to improper authorization.
network
low complexity
acronis CWE-639
8.1
8.1
2023-09-27 CVE-2023-44155 Information Exposure Through Log Files vulnerability in Acronis Cyber Protect 15
Sensitive information leak through log files.
network
low complexity
acronis CWE-532
7.5
7.5
2023-09-27 CVE-2023-44156 Unspecified vulnerability in Acronis Cyber Protect 15
Sensitive information disclosure due to spell-jacking.
network
low complexity
acronis
7.5
7.5
2023-09-27 CVE-2023-44157 Incorrect Default Permissions vulnerability in Acronis Cyber Protect 15
Local privilege escalation due to insecure folder permissions.
local
low complexity
acronis CWE-276
7.8
7.8
2023-09-27 CVE-2023-44158 Insufficiently Protected Credentials vulnerability in Acronis Cyber Protect 15
Sensitive information disclosure due to insufficient token field masking.
network
low complexity
acronis CWE-522
7.5
7.5
2023-09-27 CVE-2023-44159 Cleartext Storage of Sensitive Information vulnerability in Acronis Cyber Protect 15
Sensitive information disclosure due to cleartext storage of sensitive information.
network
low complexity
acronis CWE-312
7.5
7.5
2023-09-27 CVE-2023-44160 Cross-Site Request Forgery (CSRF) vulnerability in Acronis Cyber Protect 15
Sensitive information manipulation due to cross-site request forgery.
network
low complexity
acronis CWE-352
6.5
6.5
2023-09-27 CVE-2023-44161 Cross-Site Request Forgery (CSRF) vulnerability in Acronis Cyber Protect 15
Sensitive information manipulation due to cross-site request forgery.
network
low complexity
acronis CWE-352
6.5
6.5
2023-09-27 CVE-2023-44205 Authorization Bypass Through User-Controlled Key vulnerability in Acronis Cyber Protect 15
Sensitive information disclosure due to improper authorization.
network
low complexity
acronis CWE-639
5.3
5.3