Advisories · Technology
Acronis Cyber Protect 16.
Every CVE that names Acronis Cyber Protect 16 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · CVSS 9+
Missing authorization in Acronis Cyber Protect 16 and others
- Acronis Cyber Protect 16
- Acronis Cyber Protect 15
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Missing authentication in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
Weak authentication in Acronis Cyber Protect 16 and others
- Acronis Cyber Protect 16
- Acronis Cyber Protect 15
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
Weak authentication in Acronis Cyber Protect 16 and others
- Acronis Cyber Protect 16
- Acronis Cyber Protect 15
- Authentication bypass
- CVSS 4.3 Medium
Server-side request forgery in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Server-side request forgery (SSRF)
- CVSS 7.3 High
Incorrect permission assignment in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Broken access control
- CVSS 5.9 Medium
Weak encryption in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Weak cryptography or TLS
- CVSS 6.7 Medium
Incorrect permission assignment in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Broken access control
- CVSS 3.1 Low
Cross-site scripting in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
Local privilege escalation due to excessive permissions assigned to Tray Monitor service.
- Acronis Cyber Protect 16
- Acronis Cyber Protect Cloud Agent
- Privilege escalation
- CVSS 5.5 Medium
Weak hash in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Weak cryptography or TLS
- CVSS 6.1 Medium
Insufficient session expiration in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Authentication bypass
- CVSS 6.6 Medium
Uncontrolled search path in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- CWE-427
- CVSS 7.3 High
Uncontrolled search path in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- CWE-427
- CVSS 2.5 Low
Broken or risky cryptographic algorithm in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Weak cryptography or TLS
- CVSS 3.1 Low
Insecure direct object reference in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Broken access control
- CVSS 5.4 Medium
Cleartext transmission of sensitive information in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Weak cryptography or TLS
- CVSS 3.5 Low
Excessive attack surface in acep-collector service due to binding to an unrestricted IP address.
- Acronis Cyber Protect 16
- CWE-1327
- CVSS 3.5 Low
Excessive attack surface in acep-importer service due to binding to an unrestricted IP address.
- Acronis Cyber Protect 16
- CWE-1327
- CVSS 3.5 Low
Excessive attack surface in archive-server service due to binding to an unrestricted IP address.
- Acronis Cyber Protect 16
- CWE-1327
- CVSS 6.7 Medium
Uncontrolled search path in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- CWE-427
- CVSS 8.2 High
Unquoted search path in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- CWE-428
- CVSS 7.1 High
Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Broken access control
- CVSS 6.1 Medium
Cross-site scripting in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Cross-site scripting (XSS)
- CVSS 1.9 Low
Cross-site scripting in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Cross-site scripting (XSS)
- CVSS 3.3 Low
Exposure of personal information in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Information disclosure
- CVSS 3.1 Low
Cross-site scripting in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Cross-site scripting (XSS)
- CVSS 5.5 Medium
Incorrect default permissions in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- Broken access control
- CVSS 7.3 High
Uncontrolled search path in Acronis Cyber Protect Home Office and others
- Acronis Cyber Protect Home Office
- Acronis Cyber Protect Cloud Agent
- CWE-427
- CVSS 7.1 High
Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Broken access control
- CVSS 6.6 Medium
Uncontrolled search path in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- CWE-427
- CVSS 7.1 High
Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Broken access control
- CVSS 7.1 High
Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Broken access control
- CVSS 4.4 Medium
Sensitive information in log files in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Information disclosure
- CVSS 3.3 Low
Exposure of personal information in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Information disclosure
- CVSS 7.1 High
Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Broken access control