Vulnerabilities > Acronis

DATE CVE VULNERABILITY TITLE RISK
2023-09-27 CVE-2023-44159 Cleartext Storage of Sensitive Information vulnerability in Acronis Cyber Protect 15
Sensitive information disclosure due to cleartext storage of sensitive information.
network
low complexity
acronis CWE-312
7.5
2023-09-27 CVE-2023-44160 Cross-Site Request Forgery (CSRF) vulnerability in Acronis Cyber Protect 15
Sensitive information manipulation due to cross-site request forgery.
network
low complexity
acronis CWE-352
6.5
2023-09-27 CVE-2023-44161 Cross-Site Request Forgery (CSRF) vulnerability in Acronis Cyber Protect 15
Sensitive information manipulation due to cross-site request forgery.
network
low complexity
acronis CWE-352
6.5
2023-09-27 CVE-2023-44205 Authorization Bypass Through User-Controlled Key vulnerability in Acronis Cyber Protect 15
Sensitive information disclosure due to improper authorization.
network
low complexity
acronis CWE-639
5.3
2023-09-27 CVE-2023-44206 Authorization Bypass Through User-Controlled Key vulnerability in Acronis Cyber Protect 15
Sensitive information disclosure and manipulation due to improper authorization.
network
low complexity
acronis CWE-639
critical
9.1
2023-09-27 CVE-2023-44207 Cross-site Scripting vulnerability in Acronis Cyber Protect 15
Stored cross-site scripting (XSS) vulnerability in protection plan name.
network
low complexity
acronis CWE-79
5.4
2023-09-20 CVE-2023-5042 Incorrect Default Permissions vulnerability in Acronis Cyber Protect Home Office
Sensitive information disclosure due to insecure folder permissions.
network
low complexity
acronis CWE-276
7.5
2023-08-31 CVE-2023-41749 Unspecified vulnerability in Acronis Agent and Cyber Protect
Sensitive information disclosure due to excessive collection of system information.
network
low complexity
acronis
7.5
2023-08-31 CVE-2023-41750 Missing Authorization vulnerability in Acronis Agent
Sensitive information disclosure due to missing authorization.
local
low complexity
acronis CWE-862
5.5
2023-08-31 CVE-2023-41751 Improper Authentication vulnerability in Acronis Agent
Sensitive information disclosure due to improper token expiration validation.
local
low complexity
acronis CWE-287
5.5