Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-11-07	CVE-2022-44745	Information Exposure Through Log Files vulnerability in Acronis Cyber Protect Home Office Sensitive information leak through log files. local low complexity acronis CWE-532	5.5
2022-11-07	CVE-2022-44746	Incorrect Permission Assignment for Critical Resource vulnerability in Acronis Cyber Protect Home Office Sensitive information disclosure due to insecure folder permissions. local low complexity acronis CWE-732	5.5
2022-05-18	CVE-2022-30991	Cross-site Scripting vulnerability in Acronis Cyber Protect 15 HTML injection via report name. network low complexity acronis CWE-79	6.1
2022-05-18	CVE-2022-30992	Open Redirect vulnerability in Acronis Cyber Protect 15 Open redirect via user-controlled query parameter. network low complexity acronis CWE-601	6.1
2021-11-29	CVE-2021-44199	Uncontrolled Search Path Element vulnerability in Acronis Agent, Cyber Protect and Cyber Protect Home Office DLL hijacking could lead to denial of service. local low complexity acronis CWE-427	5.5
2021-11-29	CVE-2021-44200	Cross-site Scripting vulnerability in Acronis Cyber Protect 15 Self cross-site scripting (XSS) was possible on devices page. network low complexity acronis CWE-79	5.4
2021-11-29	CVE-2021-44201	Cross-site Scripting vulnerability in Acronis Cyber Protect 15 Cross-site scripting (XSS) was possible in notification pop-ups. network low complexity acronis CWE-79	6.1
2021-11-29	CVE-2021-44202	Cross-site Scripting vulnerability in Acronis Cyber Protect 15 Stored cross-site scripting (XSS) was possible in activity details. network low complexity acronis CWE-79	5.4
2021-11-29	CVE-2021-44203	Cross-site Scripting vulnerability in Acronis Cyber Protect 15 Stored cross-site scripting (XSS) was possible in protection plan details. network low complexity acronis CWE-79	5.4
2021-08-12	CVE-2021-38087	Cross-site Scripting vulnerability in Acronis Cyber Protect 15 Reflected cross-site scripting (XSS) was possible on the login page in Acronis Cyber Protect 15 prior to build 27009. network low complexity acronis CWE-79	6.1