Cyber Protect

DATE	CVE	VULNERABILITY TITLE	RISK
2023-09-27	CVE-2023-44205	Authorization Bypass Through User-Controlled Key vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure due to improper authorization. network low complexity acronis CWE-639	5.3
2023-09-27	CVE-2023-44206	Authorization Bypass Through User-Controlled Key vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure and manipulation due to improper authorization. network low complexity acronis CWE-639 critical	9.1
2023-09-27	CVE-2023-44207	Cross-site Scripting vulnerability in Acronis Cyber Protect 15 Stored cross-site scripting (XSS) vulnerability in protection plan name. network low complexity acronis CWE-79	5.4
2023-08-31	CVE-2023-41749	Unspecified vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure due to excessive collection of system information. network low complexity acronis	7.5
2023-08-31	CVE-2023-41745	Exposure of Resource to Wrong Sphere vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure due to excessive collection of system information. local low complexity acronis CWE-668	5.5
2023-08-31	CVE-2023-41743	Improper Privilege Management vulnerability in Acronis Agent, Cyber Protect and Cyber Protect Home Office Local privilege escalation due to insecure driver communication port permissions. local low complexity acronis CWE-269	7.8
2023-08-31	CVE-2023-41744	Improper Verification of Cryptographic Signature vulnerability in Acronis Agent and Cyber Protect Local privilege escalation due to unrestricted loading of unsigned libraries. local low complexity acronis CWE-347	7.8
2023-08-31	CVE-2022-45451	Improper Privilege Management vulnerability in Acronis Agent, Cyber Protect and Cyber Protect Home Office Local privilege escalation due to insecure driver communication port permissions. local low complexity acronis CWE-269	7.8
2023-08-31	CVE-2023-41742	Exposure of Resource to Wrong Sphere vulnerability in Acronis Agent and Cyber Protect Excessive attack surface due to binding to an unrestricted IP address. network low complexity acronis CWE-668	7.5
2023-05-18	CVE-2022-45450	Files or Directories Accessible to External Parties vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure and manipulation due to improper authorization. network low complexity acronis CWE-552	7.5