Vulnerabilities > Acronis > Cyber Protect

DATE CVE VULNERABILITY TITLE RISK
2023-05-03 CVE-2022-30995 Improper Authentication vulnerability in Acronis Cyber Backup and Cyber Protect
Sensitive information disclosure due to improper authentication.
network
low complexity
acronis CWE-287
7.5
2023-05-03 CVE-2022-3405 Unspecified vulnerability in Acronis Cyber Backup and Cyber Protect
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.
low complexity
acronis
8.8
2023-02-13 CVE-2022-45454 Incorrect Default Permissions vulnerability in Acronis Agent and Cyber Protect
Sensitive information disclosure due to insecure folder permissions.
network
low complexity
acronis CWE-276
7.5
2023-02-13 CVE-2022-45455 Incomplete Cleanup vulnerability in Acronis Agent, Cyber Protect and Cyber Protect Home Office
Local privilege escalation due to incomplete uninstallation cleanup.
local
low complexity
acronis CWE-459
7.8
2022-05-18 CVE-2022-30990 Incorrect Permission Assignment for Critical Resource vulnerability in Acronis Agent and Cyber Protect
Sensitive information disclosure due to insecure folder permissions.
network
low complexity
acronis CWE-732
7.5
2022-05-18 CVE-2022-30991 Cross-site Scripting vulnerability in Acronis Cyber Protect 15
HTML injection via report name.
network
low complexity
acronis CWE-79
6.1
2022-05-18 CVE-2022-30992 Open Redirect vulnerability in Acronis Cyber Protect 15
Open redirect via user-controlled query parameter.
network
low complexity
acronis CWE-601
6.1
2022-05-18 CVE-2022-30993 Cleartext Transmission of Sensitive Information vulnerability in Acronis Cyber Protect 15
Cleartext transmission of sensitive information.
network
low complexity
acronis CWE-319
7.5
2022-05-18 CVE-2022-30994 Cleartext Transmission of Sensitive Information vulnerability in Acronis Cyber Protect 15
Cleartext transmission of sensitive information.
network
low complexity
acronis CWE-319
7.5
2022-02-04 CVE-2021-44204 Unspecified vulnerability in Acronis products
Local privilege escalation via named pipe due to improper access control checks.
local
low complexity
acronis
7.8