Vulnerabilities > Acronis
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-09-27 | CVE-2023-44207 | Cross-site Scripting vulnerability in Acronis Cyber Protect 15 Stored cross-site scripting (XSS) vulnerability in protection plan name. | 5.4 |
| 2023-09-20 | CVE-2023-5042 | Incorrect Default Permissions vulnerability in Acronis Cyber Protect Home Office Sensitive information disclosure due to insecure folder permissions. | 7.5 |
| 2023-08-31 | CVE-2023-41749 | Unspecified vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure due to excessive collection of system information. | 7.5 |
| 2023-08-31 | CVE-2023-41750 | Missing Authorization vulnerability in Acronis Agent Sensitive information disclosure due to missing authorization. | 5.5 |
| 2023-08-31 | CVE-2023-41751 | Improper Authentication vulnerability in Acronis Agent Sensitive information disclosure due to improper token expiration validation. | 5.5 |
| 2023-08-31 | CVE-2023-4688 | Information Exposure Through Log Files vulnerability in Acronis Agent Sensitive information leak through log files. | 5.5 |
| 2023-08-31 | CVE-2022-46869 | Link Following vulnerability in Acronis Cyber Protect Home Office Local privilege escalation during installation due to improper soft link handling. | 7.8 |
| 2023-08-31 | CVE-2023-41745 | Exposure of Resource to Wrong Sphere vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure due to excessive collection of system information. | 5.5 |
| 2023-08-31 | CVE-2023-41746 | Improper Input Validation vulnerability in Acronis Cloud Manager Remote command execution due to improper input validation. | 9.8 |
| 2023-08-31 | CVE-2023-41747 | Improper Input Validation vulnerability in Acronis Cloud Manager Sensitive information disclosure due to improper input validation. | 7.5 |