Vulnerabilities > Acronis > High

DATE CVE VULNERABILITY TITLE RISK
2024-10-17 CVE-2024-49389 Incorrect Default Permissions vulnerability in Acronis Cyber Files
Local privilege escalation due to insecure folder permissions.
local
low complexity
acronis CWE-276
7.8
2024-10-17 CVE-2024-49390 Uncontrolled Search Path Element vulnerability in Acronis Cyber Files
Local privilege escalation due to DLL hijacking vulnerability.
local
low complexity
acronis CWE-427
7.3
2024-10-17 CVE-2024-49391 Uncontrolled Search Path Element vulnerability in Acronis Cyber Files
Local privilege escalation due to DLL hijacking vulnerability.
local
low complexity
acronis CWE-427
7.3
2024-10-15 CVE-2024-49387 Cleartext Transmission of Sensitive Information vulnerability in Acronis Cyber Protect 16
Cleartext transmission of sensitive information in acep-collector service.
network
low complexity
acronis CWE-319
7.5
2024-08-29 CVE-2024-34017 Uncontrolled Search Path Element vulnerability in Acronis Snap Deploy 6
Local privilege escalation due to DLL hijacking vulnerability.
local
low complexity
acronis CWE-427
7.3
2024-08-29 CVE-2024-34019 Uncontrolled Search Path Element vulnerability in Acronis Snap Deploy 6
Local privilege escalation due to DLL hijacking vulnerability.
local
low complexity
acronis CWE-427
7.3
2023-12-14 CVE-2023-48676 Missing Authorization vulnerability in Acronis Cyber Protect Cloud Agent 21/22/23
Sensitive information disclosure and manipulation due to missing authorization.
local
low complexity
acronis CWE-862
7.1
2023-12-12 CVE-2023-48677 Uncontrolled Search Path Element vulnerability in Acronis Cyber Protect Home Office
Local privilege escalation due to DLL hijacking vulnerability.
local
low complexity
acronis CWE-427
7.8
2023-10-09 CVE-2023-45247 Missing Authorization vulnerability in Acronis Agent
Sensitive information disclosure and manipulation due to missing authorization.
local
low complexity
acronis CWE-862
7.1
2023-10-09 CVE-2023-45248 Uncontrolled Search Path Element vulnerability in Acronis Agent
Local privilege escalation due to DLL hijacking vulnerability.
local
low complexity
acronis CWE-427
7.3