Acronis : Security Vulnerabilities, CVEs, CVSS score >= 2
Stored cross-site scripting (XSS) vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
Max CVSS
6.1
EPSS Score
0.04%
Published
2024-02-27
Updated
2024-02-28
Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect 16 (macOS, Windows) before build 37391.
Max CVSS
3.3
EPSS Score
0.04%
Published
2024-02-27
Updated
2024-02-28
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
Max CVSS
3.1
EPSS Score
0.04%
Published
2024-02-27
Updated
2024-02-28
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
Max CVSS
5.5
EPSS Score
0.04%
Published
2024-02-27
Updated
2024-02-28
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901.
Max CVSS
7.8
EPSS Score
0.05%
Published
2023-12-12
Updated
2023-12-14
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36943.
Max CVSS
7.1
EPSS Score
0.04%
Published
2023-12-14
Updated
2023-12-19
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36497, Acronis Cyber Protect 16 (Windows) before build 37391.
Max CVSS
7.3
EPSS Score
0.04%
Published
2023-10-09
Updated
2024-02-27
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 36497.
Max CVSS
7.1
EPSS Score
0.04%
Published
2023-10-09
Updated
2023-10-11
Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 36343.
Max CVSS
7.1
EPSS Score
0.04%
Published
2023-10-06
Updated
2023-10-11
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 36119.
Max CVSS
5.5
EPSS Score
0.04%
Published
2023-10-06
Updated
2023-10-10
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 37391.
Max CVSS
7.1
EPSS Score
0.04%
Published
2023-10-06
Updated
2024-02-27
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.
Max CVSS
5.5
EPSS Score
0.04%
Published
2023-10-05
Updated
2023-10-10
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.
Max CVSS
5.5
EPSS Score
0.04%
Published
2023-10-05
Updated
2023-10-10
Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35739, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 37391.
Max CVSS
5.5
EPSS Score
0.04%
Published
2023-10-05
Updated
2024-02-27
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.
Max CVSS
5.5
EPSS Score
0.04%
Published
2023-10-05
Updated
2023-10-10
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.
Max CVSS
5.5
EPSS Score
0.04%
Published
2023-10-05
Updated
2023-10-10
Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 35739, Acronis Cyber Protect 16 (Windows) before build 37391.
Max CVSS
5.5
EPSS Score
0.04%
Published
2023-10-05
Updated
2024-02-27
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 31477.
Max CVSS
7.3
EPSS Score
0.04%
Published
2023-10-05
Updated
2023-10-10
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 31637, Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
Max CVSS
7.1
EPSS Score
0.04%
Published
2023-10-05
Updated
2024-02-27
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 29258.
Max CVSS
7.3
EPSS Score
0.04%
Published
2023-10-04
Updated
2023-10-06
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 29051.
Max CVSS
7.8
EPSS Score
0.04%
Published
2023-10-04
Updated
2023-10-06
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713.
Max CVSS
9.1
EPSS Score
0.09%
Published
2023-10-04
Updated
2023-10-05
Stored cross-site scripting (XSS) vulnerability in protection plan name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Max CVSS
6.7
EPSS Score
0.05%
Published
2023-09-27
Updated
2023-09-28
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Max CVSS
9.1
EPSS Score
0.09%
Published
2023-09-27
Updated
2023-09-28
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Max CVSS
5.3
EPSS Score
0.05%
Published
2023-09-27
Updated
2023-09-28