Advisories · Technology
Acronis Cyber Protect 15.
Every CVE that names Acronis Cyber Protect 15 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · CVSS 9+
Missing authorization in Acronis Cyber Protect 16 and others
- Acronis Cyber Protect 16
- Acronis Cyber Protect 15
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Missing authentication in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
Weak authentication in Acronis Cyber Protect 16 and others
- Acronis Cyber Protect 16
- Acronis Cyber Protect 15
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
Weak authentication in Acronis Cyber Protect 16 and others
- Acronis Cyber Protect 16
- Acronis Cyber Protect 15
- Authentication bypass
- CVSS 7.7 High
Information disclosure in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Information disclosure
- CVSS 6.7 Medium
Cross-site scripting in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Cross-site scripting (XSS)
- CVSS 7.1 High
Insecure direct object reference in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Broken access control
- CVSS 5.5 Medium
Cleartext storage of sensitive information in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Information disclosure
- CVSS 5.7 Medium
Exposure of personal information in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Information disclosure
- CVSS 3.5 Low
Insecure direct object reference in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Broken access control
- CVSS 3.1 Low
Cross-site request forgery in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Cross-site request forgery (CSRF)
- CVSS 3.1 Low
Cross-site request forgery in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Cross-site request forgery (CSRF)
- CVSS 3.5 Low
Insufficiently protected credentials in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Hard-coded credentials
- CVSS 3.3 Low
Incorrect default permissions in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Broken access control
- CVSS 4.4 Medium
Sensitive information in log files in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Information disclosure
- CVSS 4.6 Medium
Insecure direct object reference in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Broken access control
- CVSS 2.2 Low
Sensitive information disclosure due to cleartext storage of sensitive information in memory.
- Acronis Cyber Protect 15
- CWE-316
- CVSS 6.1 Medium
Missing authentication in Acronis Cyber Protect 15
- Acronis Cyber Protect 15
- Authentication bypass
- CVSS 4.4 Medium
Information disclosure in Acronis Agent and others
- Acronis Agent
- Acronis Cyber Protect 15
- Information disclosure
- CVSS 6.1 Medium
Information disclosure in Acronis Agent and others
- Acronis Agent
- Acronis Cyber Protect 15
- Information disclosure
- CVSS 7.8 High
Improper signature verification in Acronis Agent and others
- Acronis Agent
- Acronis Cyber Protect 15
- Weak cryptography or TLS
- CVSS 8.8 High
Improper privilege management in Acronis Cyber Protect Home Office and others
- Acronis Cyber Protect Home Office
- Acronis Cyber Protect Cloud Agent
- Privilege escalation
- CVSS 8.8 High
Improper privilege management in Acronis Cyber Protect Home Office and others
- Acronis Cyber Protect Home Office
- Acronis Agent
- Privilege escalation
- CVSS 4.3 Medium
Excessive attack surface due to binding to an unrestricted IP address.
- Acronis Agent
- Acronis Cyber Protect 15
- CWE-1327
- CVSS 5.4 Medium
Improper authorization in Acronis Agent and others
- Acronis Agent
- Acronis Cyber Protect 15
- Broken access control
- CVSS 3.8 Low
Information disclosure in Acronis Agent and others
- Acronis Agent
- Acronis Cyber Protect 15
- Information disclosure
- CVSS 4.2 Medium
Improper certificate validation in Acronis Agent and others
- Acronis Agent
- Acronis Cyber Protect 15
- Weak cryptography or TLS
- CVSS 4.2 Medium
Improper certificate validation in Acronis Agent and others
- Acronis Agent
- Acronis Cyber Protect 15
- Weak cryptography or TLS
- CVSS 7.3 High
Improper privilege management in Acronis Agent and others
- Acronis Agent
- Acronis Cyber Protect 15
- Privilege escalation
- CVSS 5.3 Medium
TLS/SSL weak cipher suites enabled.
- Acronis Cyber Protect 15
- CWE-310
- CVSS 9.3 CriticalCritical · CVSS 9+
Improper authentication in Acronis Cyber Protect 15 and others
- Acronis Cyber Protect 15
- Acronis Cyber Backup 12.5
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
Improper privilege management in Acronis Cyber Protect 15 and others
- Acronis Cyber Protect 15
- Acronis Cyber Backup 12.5
- Privilege escalation
- CVSS 6.6 Medium
Incomplete cleanup in Acronis Cyber Protect Home Office and others
- Acronis Cyber Protect Home Office
- Acronis Agent
- CWE-459
- CVSS 2.2 Low
Information disclosure in Acronis Agent and others
- Acronis Agent
- Acronis Cyber Protect 15
- Information disclosure
-
HTML injection via report name
- Acronis Cyber Protect 15
- Other injection
-
Open redirect via user-controlled query parameter
- Acronis Cyber Protect 15
- Open redirect
-
Cleartext transmission of sensitive information
- Acronis Cyber Protect 15
- Weak cryptography or TLS
-
Cleartext transmission of sensitive information
- Acronis Cyber Protect 15
- Weak cryptography or TLS
-
Sensitive information disclosure due to insecure folder permissions
- Acronis Cyber Protect 15
- Acronis Agent
- Information disclosure
-
Local privilege escalation via named pipe due to improper access control checks
- Acronis Cyber Protect 15
- Acronis Agent
- Broken access control
-
Local privilege escalation due to excessive permissions assigned to child processes
- Acronis Cyber Protect 15
- Acronis Agent
- Privilege escalation
-
Self cross-site scripting (XSS) was possible on devices page
- Acronis Cyber Protect 15
- Cross-site scripting (XSS)
-
DLL hijacking could lead to denial of service
- Acronis Cyber Protect 15
- Acronis Agent
- CWE-427
-
Stored cross-site scripting (XSS) was possible in activity details
- Acronis Cyber Protect 15
- Cross-site scripting (XSS)
-
Stored cross-site scripting (XSS) was possible in protection plan details
- Acronis Cyber Protect 15
- Cross-site scripting (XSS)
-
DLL hijacking could lead to local privilege escalation
- Acronis Cyber Protect 15
- CWE-427
-
Cross-site scripting (XSS) was possible in notification pop-ups
- Acronis Cyber Protect 15
- Cross-site scripting (XSS)