Vulnerabilities > Acronis > Cyber Protect
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-09-27 | CVE-2023-44157 | Incorrect Default Permissions vulnerability in Acronis Cyber Protect 15 Local privilege escalation due to insecure folder permissions. | 7.8 |
| 2023-09-27 | CVE-2023-44158 | Insufficiently Protected Credentials vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure due to insufficient token field masking. | 7.5 |
| 2023-09-27 | CVE-2023-44159 | Cleartext Storage of Sensitive Information vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure due to cleartext storage of sensitive information. | 7.5 |
| 2023-09-27 | CVE-2023-44160 | Cross-Site Request Forgery (CSRF) vulnerability in Acronis Cyber Protect 15 Sensitive information manipulation due to cross-site request forgery. | 6.5 |
| 2023-09-27 | CVE-2023-44161 | Cross-Site Request Forgery (CSRF) vulnerability in Acronis Cyber Protect 15 Sensitive information manipulation due to cross-site request forgery. | 6.5 |
| 2023-09-27 | CVE-2023-44205 | Authorization Bypass Through User-Controlled Key vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure due to improper authorization. | 5.3 |
| 2023-09-27 | CVE-2023-44206 | Authorization Bypass Through User-Controlled Key vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure and manipulation due to improper authorization. | 9.1 |
| 2023-09-27 | CVE-2023-44207 | Cross-site Scripting vulnerability in Acronis Cyber Protect 15 Stored cross-site scripting (XSS) vulnerability in protection plan name. | 5.4 |
| 2023-08-31 | CVE-2023-41749 | Unspecified vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure due to excessive collection of system information. | 7.5 |
| 2023-08-31 | CVE-2023-41745 | Exposure of Resource to Wrong Sphere vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure due to excessive collection of system information. | 5.5 |