Vulnerabilities > Acronis > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-09-27 CVE-2023-44205 Authorization Bypass Through User-Controlled Key vulnerability in Acronis Cyber Protect 15
Sensitive information disclosure due to improper authorization.
network
low complexity
acronis CWE-639
5.3
5.3
2023-09-27 CVE-2023-44207 Cross-site Scripting vulnerability in Acronis Cyber Protect 15
Stored cross-site scripting (XSS) vulnerability in protection plan name.
network
low complexity
acronis CWE-79
5.4
5.4
2023-08-31 CVE-2023-41750 Missing Authorization vulnerability in Acronis Agent
Sensitive information disclosure due to missing authorization.
local
low complexity
acronis CWE-862
5.5
5.5
2023-08-31 CVE-2023-41751 Improper Authentication vulnerability in Acronis Agent
Sensitive information disclosure due to improper token expiration validation.
local
low complexity
acronis CWE-287
5.5
5.5
2023-08-31 CVE-2023-4688 Information Exposure Through Log Files vulnerability in Acronis Agent
Sensitive information leak through log files.
local
low complexity
acronis CWE-532
5.5
5.5
2023-08-31 CVE-2023-41745 Exposure of Resource to Wrong Sphere vulnerability in Acronis Agent and Cyber Protect
Sensitive information disclosure due to excessive collection of system information.
local
low complexity
acronis CWE-668
5.5
5.5
2023-05-18 CVE-2023-2782 Incorrect Authorization vulnerability in Acronis Cyber Infrastructure
Sensitive information disclosure due to improper authorization.
local
low complexity
acronis CWE-863
5.5
5.5
2022-11-07 CVE-2022-44745 Information Exposure Through Log Files vulnerability in Acronis Cyber Protect Home Office
Sensitive information leak through log files.
local
low complexity
acronis CWE-532
5.5
5.5
2022-11-07 CVE-2022-44746 Incorrect Permission Assignment for Critical Resource vulnerability in Acronis Cyber Protect Home Office
Sensitive information disclosure due to insecure folder permissions.
local
low complexity
acronis CWE-732
5.5
5.5
2022-05-18 CVE-2022-30991 Cross-site Scripting vulnerability in Acronis Cyber Protect 15
HTML injection via report name.
network
low complexity
acronis CWE-79
6.1
6.1