# Acronis Cyber Protect 15.

Every CVE that names Acronis Cyber Protect 15 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Missing authorization in Acronis Cyber Protect 16 and others](https://agentprime.io/advisories/CVE-2025-30416.md)
  `CVE-2025-30416` · CVE record: Acronis Acronis Cyber Protect 16 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Feb 2026 · Tags: Broken access control
- [Missing authentication in Acronis Cyber Protect Cloud Agent and others](https://agentprime.io/advisories/CVE-2025-30410.md)
  `CVE-2025-30410` · CVE record: Acronis Acronis Cyber Protect Cloud Agent and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Feb 2026 · Tags: Authentication bypass
- [Weak authentication in Acronis Cyber Protect 16 and others](https://agentprime.io/advisories/CVE-2025-30412.md)
  `CVE-2025-30412` · CVE record: Acronis Acronis Cyber Protect 16 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Feb 2026 · Tags: Authentication bypass
- [Weak authentication in Acronis Cyber Protect 16 and others](https://agentprime.io/advisories/CVE-2025-30411.md)
  `CVE-2025-30411` · CVE record: Acronis Acronis Cyber Protect 16 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Feb 2026 · Tags: Authentication bypass
- [Information disclosure in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2022-45449.md)
  `CVE-2022-45449` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 7.7 High · Not analysed yet · Published 16 Jul 2024 · Tags: Information disclosure
- [Cross-site scripting in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2023-44207.md)
  `CVE-2023-44207` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 6.7 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: Cross-site scripting (XSS)
- [Insecure direct object reference in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2023-44206.md)
  `CVE-2023-44206` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 7.1 High · Not analysed yet · Published 27 Sept 2023 · Tags: Broken access control
- [Cleartext storage of sensitive information in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2023-44159.md)
  `CVE-2023-44159` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 5.5 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: Information disclosure
- [Exposure of personal information in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2023-44156.md)
  `CVE-2023-44156` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 5.7 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: Information disclosure
- [Insecure direct object reference in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2023-44205.md)
  `CVE-2023-44205` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 3.5 Low · Not analysed yet · Published 27 Sept 2023 · Tags: Broken access control
- [Cross-site request forgery in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2023-44161.md)
  `CVE-2023-44161` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 3.1 Low · Not analysed yet · Published 27 Sept 2023 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2023-44160.md)
  `CVE-2023-44160` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 3.1 Low · Not analysed yet · Published 27 Sept 2023 · Tags: Cross-site request forgery (CSRF)
- [Insufficiently protected credentials in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2023-44158.md)
  `CVE-2023-44158` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 3.5 Low · Not analysed yet · Published 27 Sept 2023 · Tags: Hard-coded credentials
- [Incorrect default permissions in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2023-44157.md)
  `CVE-2023-44157` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 3.3 Low · Not analysed yet · Published 27 Sept 2023 · Tags: Broken access control
- [Sensitive information in log files in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2023-44155.md)
  `CVE-2023-44155` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 4.4 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: Information disclosure
- [Insecure direct object reference in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2023-44154.md)
  `CVE-2023-44154` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 4.6 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: Broken access control
- [Sensitive information disclosure due to cleartext storage of sensitive information in memory.](https://agentprime.io/advisories/CVE-2023-44153.md)
  `CVE-2023-44153` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 2.2 Low · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-316
- [Missing authentication in Acronis Cyber Protect 15](https://agentprime.io/advisories/CVE-2023-44152.md)
  `CVE-2023-44152` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 6.1 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: Authentication bypass
- [Information disclosure in Acronis Agent and others](https://agentprime.io/advisories/CVE-2023-41749.md)
  `CVE-2023-41749` · CVE record: Acronis Acronis Agent and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Information disclosure
- [Information disclosure in Acronis Agent and others](https://agentprime.io/advisories/CVE-2023-41745.md)
  `CVE-2023-41745` · CVE record: Acronis Acronis Agent and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Information disclosure
- [Improper signature verification in Acronis Agent and others](https://agentprime.io/advisories/CVE-2023-41744.md)
  `CVE-2023-41744` · CVE record: Acronis Acronis Agent and 1 more · CVSS 7.8 High · Not analysed yet · Published 31 Aug 2023 · Tags: Weak cryptography or TLS
- [Improper privilege management in Acronis Cyber Protect Home Office and others](https://agentprime.io/advisories/CVE-2023-41743.md)
  `CVE-2023-41743` · CVE record: Acronis Acronis Cyber Protect Home Office and 3 more · CVSS 8.8 High · Not analysed yet · Published 31 Aug 2023 · Tags: Privilege escalation
- [Improper privilege management in Acronis Cyber Protect Home Office and others](https://agentprime.io/advisories/CVE-2022-45451.md)
  `CVE-2022-45451` · CVE record: Acronis Acronis Cyber Protect Home Office and 2 more · CVSS 8.8 High · Not analysed yet · Published 31 Aug 2023 · Tags: Privilege escalation
- [Excessive attack surface due to binding to an unrestricted IP address.](https://agentprime.io/advisories/CVE-2023-41742.md)
  `CVE-2023-41742` · CVE record: Acronis Acronis Agent and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: CWE-1327
- [Improper authorization in Acronis Agent and others](https://agentprime.io/advisories/CVE-2022-45450.md)
  `CVE-2022-45450` · CVE record: Acronis Acronis Agent and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 18 May 2023 · Tags: Broken access control
- [Information disclosure in Acronis Agent and others](https://agentprime.io/advisories/CVE-2022-45459.md)
  `CVE-2022-45459` · CVE record: Acronis Acronis Agent and 1 more · CVSS 3.8 Low · Not analysed yet · Published 18 May 2023 · Tags: Information disclosure
- [Improper certificate validation in Acronis Agent and others](https://agentprime.io/advisories/CVE-2022-45458.md)
  `CVE-2022-45458` · CVE record: Acronis Acronis Agent and 1 more · CVSS 4.2 Medium · Not analysed yet · Published 18 May 2023 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Acronis Agent and others](https://agentprime.io/advisories/CVE-2022-45457.md)
  `CVE-2022-45457` · CVE record: Acronis Acronis Agent and 1 more · CVSS 4.2 Medium · Not analysed yet · Published 18 May 2023 · Tags: Weak cryptography or TLS
- [Improper privilege management in Acronis Agent and others](https://agentprime.io/advisories/CVE-2022-45452.md)
  `CVE-2022-45452` · CVE record: Acronis Acronis Agent and 1 more · CVSS 7.3 High · Not analysed yet · Published 18 May 2023 · Tags: Privilege escalation
- [TLS/SSL weak cipher suites enabled.](https://agentprime.io/advisories/CVE-2022-45453.md)
  `CVE-2022-45453` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 5.3 Medium · Not analysed yet · Published 18 May 2023 · Tags: CWE-310
- [Improper authentication in Acronis Cyber Protect 15 and others](https://agentprime.io/advisories/CVE-2022-30995.md)
  `CVE-2022-30995` · CVE record: Acronis Acronis Cyber Protect 15 and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 May 2023 · Tags: Authentication bypass
- [Improper privilege management in Acronis Cyber Protect 15 and others](https://agentprime.io/advisories/CVE-2022-3405.md)
  `CVE-2022-3405` · CVE record: Acronis Acronis Cyber Protect 15 and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 May 2023 · Tags: Privilege escalation
- [Incomplete cleanup in Acronis Cyber Protect Home Office and others](https://agentprime.io/advisories/CVE-2022-45455.md)
  `CVE-2022-45455` · CVE record: Acronis Acronis Cyber Protect Home Office and 2 more · CVSS 6.6 Medium · Not analysed yet · Published 13 Feb 2023 · Tags: CWE-459
- [Information disclosure in Acronis Agent and others](https://agentprime.io/advisories/CVE-2022-45454.md)
  `CVE-2022-45454` · CVE record: Acronis Acronis Agent and 1 more · CVSS 2.2 Low · Not analysed yet · Published 13 Feb 2023 · Tags: Information disclosure
- [HTML injection via report name](https://agentprime.io/advisories/CVE-2022-30991.md)
  `CVE-2022-30991` · CVE record: Acronis Acronis Cyber Protect 15 · No CVSS score · Not analysed yet · Published 18 May 2022 · Tags: Other injection
- [Open redirect via user-controlled query parameter](https://agentprime.io/advisories/CVE-2022-30992.md)
  `CVE-2022-30992` · CVE record: Acronis Acronis Cyber Protect 15 · No CVSS score · Not analysed yet · Published 18 May 2022 · Tags: Open redirect
- [Cleartext transmission of sensitive information](https://agentprime.io/advisories/CVE-2022-30993.md)
  `CVE-2022-30993` · CVE record: Acronis Acronis Cyber Protect 15 · No CVSS score · Not analysed yet · Published 18 May 2022 · Tags: Weak cryptography or TLS
- [Cleartext transmission of sensitive information](https://agentprime.io/advisories/CVE-2022-30994.md)
  `CVE-2022-30994` · CVE record: Acronis Acronis Cyber Protect 15 · No CVSS score · Not analysed yet · Published 18 May 2022 · Tags: Weak cryptography or TLS
- [Sensitive information disclosure due to insecure folder permissions](https://agentprime.io/advisories/CVE-2022-30990.md)
  `CVE-2022-30990` · CVE record: Acronis Acronis Cyber Protect 15 and 1 more · No CVSS score · Not analysed yet · Published 18 May 2022 · Tags: Information disclosure
- [Local privilege escalation via named pipe due to improper access control checks](https://agentprime.io/advisories/CVE-2021-44204.md)
  `CVE-2021-44204` · CVE record: Acronis Acronis Cyber Protect 15 and 3 more · No CVSS score · Not analysed yet · Published 4 Feb 2022 · Tags: Broken access control
- [Local privilege escalation due to excessive permissions assigned to child processes](https://agentprime.io/advisories/CVE-2022-24113.md)
  `CVE-2022-24113` · CVE record: Acronis Acronis Cyber Protect 15 and 3 more · No CVSS score · Not analysed yet · Published 4 Feb 2022 · Tags: Privilege escalation
- [Self cross-site scripting (XSS) was possible on devices page](https://agentprime.io/advisories/CVE-2021-44200.md)
  `CVE-2021-44200` · CVE record: Acronis Acronis Cyber Protect 15 · No CVSS score · Not analysed yet · Published 29 Nov 2021 · Tags: Cross-site scripting (XSS)
- [DLL hijacking could lead to denial of service](https://agentprime.io/advisories/CVE-2021-44199.md)
  `CVE-2021-44199` · CVE record: Acronis Acronis Cyber Protect 15 and 2 more · No CVSS score · Not analysed yet · Published 29 Nov 2021 · Tags: CWE-427
- [Stored cross-site scripting (XSS) was possible in activity details](https://agentprime.io/advisories/CVE-2021-44202.md)
  `CVE-2021-44202` · CVE record: Acronis Acronis Cyber Protect 15 · No CVSS score · Not analysed yet · Published 29 Nov 2021 · Tags: Cross-site scripting (XSS)
- [Stored cross-site scripting (XSS) was possible in protection plan details](https://agentprime.io/advisories/CVE-2021-44203.md)
  `CVE-2021-44203` · CVE record: Acronis Acronis Cyber Protect 15 · No CVSS score · Not analysed yet · Published 29 Nov 2021 · Tags: Cross-site scripting (XSS)
- [DLL hijacking could lead to local privilege escalation](https://agentprime.io/advisories/CVE-2021-44198.md)
  `CVE-2021-44198` · CVE record: Acronis Acronis Cyber Protect 15 · No CVSS score · Not analysed yet · Published 29 Nov 2021 · Tags: CWE-427
- [Cross-site scripting (XSS) was possible in notification pop-ups](https://agentprime.io/advisories/CVE-2021-44201.md)
  `CVE-2021-44201` · CVE record: Acronis Acronis Cyber Protect 15 · No CVSS score · Not analysed yet · Published 29 Nov 2021 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=acronis-cyber-protect-15>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/acronis-cyber-protect-15/>. Everything for agents: <https://agentprime.io/llms.txt>.