Vulnerabilities > Acronis > Cyber Protect
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-27 | CVE-2023-48679 | Unspecified vulnerability in Acronis Cyber Protect 15 Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. | 5.4 |
| 2024-02-27 | CVE-2023-48680 | Unspecified vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure due to excessive collection of system information. | 5.5 |
| 2024-02-27 | CVE-2023-48681 | Unspecified vulnerability in Acronis Cyber Protect 15 Self cross-site scripting (XSS) vulnerability in storage nodes search field. | 6.1 |
| 2024-02-27 | CVE-2023-48682 | Unspecified vulnerability in Acronis Cyber Protect 15 Stored cross-site scripting (XSS) vulnerability in unit name. | 5.4 |
| 2023-09-27 | CVE-2023-44152 | Unspecified vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure and manipulation due to improper authentication. | 9.1 |
| 2023-09-27 | CVE-2023-44153 | Cleartext Storage of Sensitive Information vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure due to cleartext storage of sensitive information in memory. | 7.5 |
| 2023-09-27 | CVE-2023-44154 | Authorization Bypass Through User-Controlled Key vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure and manipulation due to improper authorization. | 8.1 |
| 2023-09-27 | CVE-2023-44155 | Information Exposure Through Log Files vulnerability in Acronis Cyber Protect 15 Sensitive information leak through log files. | 7.5 |
| 2023-09-27 | CVE-2023-44156 | Unspecified vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure due to spell-jacking. | 7.5 |
| 2023-09-27 | CVE-2023-44157 | Incorrect Default Permissions vulnerability in Acronis Cyber Protect 15 Local privilege escalation due to insecure folder permissions. | 7.8 |