Skip to contentAcronis Cyber Protect 15 vulnerabilities
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to missing authorization. The following products...CVE-2025-3041610.0 Critical
- acronis cyber protect 15, cyber protect 16, cyber protect cloud agent +2 moreSensitive data disclosure and manipulation due to missing authentication. The following products...CVE-2025-304109.8 Critical
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to improper authentication. The following products...CVE-2025-3041210.0 Critical
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to improper authentication. The following products...CVE-2025-3041110.0 Critical
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to excessive privileges assigned to Acronis Agent. The...CVE-2022-454497.7 High
- acronis cyber protect 15, cyber protect +1 moreStored cross-site scripting (XSS) vulnerability in protection plan name. The following products...CVE-2023-442076.7 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure and manipulation due to improper authorization. The following...CVE-2023-442067.1 High
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to cleartext storage of sensitive information. The following...CVE-2023-441595.5 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to spell-jacking. The following products are affected:...CVE-2023-441565.7 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to improper authorization. The following products are...CVE-2023-442053.5 Low
- acronis cyber protect 15, cyber protect +1 moreSensitive information manipulation due to cross-site request forgery. The following products are...CVE-2023-441613.1 Low
- acronis cyber protect 15, cyber protect +1 moreSensitive information manipulation due to cross-site request forgery. The following products are...CVE-2023-441603.1 Low
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to insufficient token field masking. The following products...CVE-2023-441583.5 Low
- acronis cyber protect 15, cyber protect +1 moreLocal privilege escalation due to insecure folder permissions. The following products are...CVE-2023-441573.3 Low
- acronis cyber protect 15, cyber protect +1 moreSensitive information leak through log files. The following products are affected: Acronis Cyber...CVE-2023-441554.4 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure and manipulation due to improper authorization. The following...CVE-2023-441544.6 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to cleartext storage of sensitive information in memory. The...CVE-2023-441532.2 Low
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure and manipulation due to improper authentication. The following...CVE-2023-441526.1 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to excessive collection of system information. The following...CVE-2023-417494.4 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to excessive collection of system information. The following...CVE-2023-417456.1 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreLocal privilege escalation due to unrestricted loading of unsigned libraries. The following...CVE-2023-417447.8 High
- acronis cyber protect 15, cyber protect cloud agent, cyber protect home office +3 more +5 moreLocal privilege escalation due to insecure driver communication port permissions. The following...CVE-2023-417438.8 High
- acronis agent, cyber protect 15, cyber protect home office +1 more +3 moreLocal privilege escalation due to insecure driver communication port permissions. The following...CVE-2022-45451Public exploit8.8 High
- acronis agent, cyber protect 15, cyber protect +2 moreExcessive attack surface due to binding to an unrestricted IP address. The following products are...CVE-2023-417424.3 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure and manipulation due to improper authorization. The following...CVE-2022-454505.4 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to insecure registry permissions. The following products are...CVE-2022-454593.8 Low
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure and manipulation due to improper certification validation. The...CVE-2022-454584.2 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure and manipulation due to improper certification validation. The...CVE-2022-454574.2 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreLocal privilege escalation due to insecure folder permissions. The following products are...CVE-2022-454527.3 High
- acronis cyber protect 15, cyber protect +1 moreTLS/SSL weak cipher suites enabled. The following products are affected: Acronis Cyber Protect 15...CVE-2022-454535.3 Medium
- acronis cyber backup 12.5, cyber protect 15, cyber backup +1 more +3 moreSensitive information disclosure due to improper authentication. The following products are...CVE-2022-309959.3 Critical
- acronis cyber backup 12.5, cyber protect 15, cyber backup +1 more +3 moreCode execution and sensitive information disclosure due to excessive privileges assigned to...CVE-2022-3405Public exploit9.3 Critical
- acronis agent, cyber protect 15, cyber protect home office +1 more +3 moreLocal privilege escalation due to incomplete uninstallation cleanup. The following products are...CVE-2022-454556.6 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to insecure folder permissions. The following products are...CVE-2022-454542.2 Low
- acronis cyber protect 15, cyber protect +1 moreHTML injection via report nameCVE-2022-309916.1 Medium
- acronis cyber protect 15, cyber protect +1 moreOpen redirect via user-controlled query parameterCVE-2022-309926.1 Medium
- acronis cyber protect 15, cyber protect +1 moreCleartext transmission of sensitive informationCVE-2022-309937.5 High
- acronis cyber protect 15, cyber protect +1 moreCleartext transmission of sensitive informationCVE-2022-309947.5 High
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to insecure folder permissionsCVE-2022-309907.5 High
- acronis agent, cyber protect 15, cyber protect home office +3 more +5 moreLocal privilege escalation via named pipe due to improper access control checksCVE-2021-442047.8 High
- acronis agent, cyber protect 15, cyber protect home office +3 more +5 moreLocal privilege escalation due to excessive permissions assigned to child processesCVE-2022-241137.8 High
- acronis cyber protect 15, cyber protect +1 moreSelf cross-site scripting (XSS) was possible on devices pageCVE-2021-442005.4 Medium
- acronis agent, cyber protect 15, cyber protect home office +1 more +3 moreDLL hijacking could lead to denial of serviceCVE-2021-441995.5 Medium
- acronis cyber protect 15, cyber protect +1 moreStored cross-site scripting (XSS) was possible in activity detailsCVE-2021-442025.4 Medium
- acronis cyber protect 15, cyber protect +1 moreStored cross-site scripting (XSS) was possible in protection plan detailsCVE-2021-442035.4 Medium
- acronis cyber protect 15, cyber protect +1 moreDLL hijacking could lead to local privilege escalationCVE-2021-441987.8 High
- acronis cyber protect 15, cyber protect +1 moreCross-site scripting (XSS) was possible in notification pop-upsCVE-2021-442016.1 Medium