High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-09-27	CVE-2023-44158	Insufficiently Protected Credentials vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure due to insufficient token field masking. network low complexity acronis CWE-522	7.5
2023-09-27	CVE-2023-44159	Cleartext Storage of Sensitive Information vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure due to cleartext storage of sensitive information. network low complexity acronis CWE-312	7.5
2023-09-20	CVE-2023-5042	Incorrect Default Permissions vulnerability in Acronis Cyber Protect Home Office Sensitive information disclosure due to insecure folder permissions. network low complexity acronis CWE-276	7.5
2023-08-31	CVE-2023-41749	Unspecified vulnerability in Acronis Agent and Cyber Protect Sensitive information disclosure due to excessive collection of system information. network low complexity acronis	7.5
2023-08-31	CVE-2022-46869	Unspecified vulnerability in Acronis Cyber Protect Home Office Local privilege escalation during installation due to improper soft link handling. local low complexity acronis	7.8
2023-08-31	CVE-2023-41743	Improper Privilege Management vulnerability in Acronis Agent, Cyber Protect and Cyber Protect Home Office Local privilege escalation due to insecure driver communication port permissions. local low complexity acronis CWE-269	7.8
2023-08-31	CVE-2023-41744	Improper Verification of Cryptographic Signature vulnerability in Acronis Agent and Cyber Protect Local privilege escalation due to unrestricted loading of unsigned libraries. local low complexity acronis CWE-347	7.8
2023-08-31	CVE-2022-45451	Improper Privilege Management vulnerability in Acronis Agent, Cyber Protect and Cyber Protect Home Office Local privilege escalation due to insecure driver communication port permissions. local low complexity acronis CWE-269	7.8
2023-08-31	CVE-2022-46868	Externally Controlled Reference to a Resource in Another Sphere vulnerability in Acronis Cyber Protect Home Office 39900/40107 Local privilege escalation during recovery due to improper soft link handling. local low complexity acronis CWE-610	7.8
2023-08-31	CVE-2023-41742	Exposure of Resource to Wrong Sphere vulnerability in Acronis Agent and Cyber Protect Excessive attack surface due to binding to an unrestricted IP address. network low complexity acronis CWE-668	7.5