Skip to contentAcronis vulnerabilities
Newest
- acronis cloud managerRemote command execution due to improper input validation. The following products are affected:...CVE-2023-417488.0 High
- acronis cloud managerSensitive information disclosure due to improper input validation. The following products are...CVE-2023-417476.5 Medium
- acronis cloud managerRemote command execution due to improper input validation. The following products are affected:...CVE-2023-417468.0 High
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to excessive collection of system information. The following...CVE-2023-417456.1 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreLocal privilege escalation due to unrestricted loading of unsigned libraries. The following...CVE-2023-417447.8 High
- acronis cyber protect 15, cyber protect cloud agent, cyber protect home office +3 more +5 moreLocal privilege escalation due to insecure driver communication port permissions. The following...CVE-2023-417438.8 High
- acronis cyber protect home officeLocal privilege escalation during recovery due to improper soft link handling. The following...CVE-2022-468686.7 Medium
- acronis agent, cyber protect 15, cyber protect home office +1 more +3 moreLocal privilege escalation due to insecure driver communication port permissions. The following...CVE-2022-45451Public exploit8.8 High
- acronis agent, cyber protect 15, cyber protect +2 moreExcessive attack surface due to binding to an unrestricted IP address. The following products are...CVE-2023-417424.3 Medium
- acronis cyber infrastructureSensitive information disclosure due to improper authorization. The following products are...CVE-2023-27825.5 Medium
- acronis cyber protect home officeLocal privilege escalation due to unrestricted loading of unsigned libraries. The following...CVE-2022-44187.8 High
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure and manipulation due to improper authorization. The following...CVE-2022-454505.4 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to insecure registry permissions. The following products are...CVE-2022-454593.8 Low
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure and manipulation due to improper certification validation. The...CVE-2022-454584.2 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure and manipulation due to improper certification validation. The...CVE-2022-454574.2 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreLocal privilege escalation due to insecure folder permissions. The following products are...CVE-2022-454527.3 High
- acronis cyber protect 15, cyber protect +1 moreTLS/SSL weak cipher suites enabled. The following products are affected: Acronis Cyber Protect 15...CVE-2022-454535.3 Medium
- acronis cyber backup 12.5, cyber protect 15, cyber backup +1 more +3 moreSensitive information disclosure due to improper authentication. The following products are...CVE-2022-309959.3 Critical
- acronis cyber backup 12.5, cyber protect 15, cyber backup +1 more +3 moreCode execution and sensitive information disclosure due to excessive privileges assigned to...CVE-2022-3405Public exploit9.3 Critical
- acronis cyber infrastructureSensitive information disclosure due to CORS misconfiguration. The following products are...CVE-2023-23603.1 Low
- acronis snap deployLocal privilege escalation due to a DLL hijacking vulnerability. The following products are...CVE-2023-23556.7 Medium
- acronis agentDenial of service due to unauthenticated API endpoint. The following products are affected:...CVE-2022-454563.3 Low
- acronis agent, cyber protect 15, cyber protect home office +1 more +3 moreLocal privilege escalation due to incomplete uninstallation cleanup. The following products are...CVE-2022-454556.6 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to insecure folder permissions. The following products are...CVE-2022-454542.2 Low
- acronis cyber protect home officeSensitive information disclosure due to insecure folder permissions. The following products are...CVE-2022-447462.2 Low
- acronis cyber protect home officeSensitive information leak through log files. The following products are affected: Acronis Cyber...CVE-2022-447454.0 Medium
- acronis cyber protect home officeLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2022-447442.2 Low
- acronis cyber protect home officeLocal privilege escalation due to improper soft link handling. The following products are...CVE-2022-447472.2 Low
- acronis cyber protect home officeLocal privilege escalation due to insecure folder permissions. The following products are...CVE-2022-447337.3 High
- acronis cyber protect home officeLocal privilege escalation due to insecure folder permissions. The following products are...CVE-2022-447327.3 High
- acronis cyber protect 15, cyber protect +1 moreHTML injection via report nameCVE-2022-309916.1 Medium
- acronis cyber protect 15, cyber protect +1 moreOpen redirect via user-controlled query parameterCVE-2022-309926.1 Medium
- acronis cyber protect 15, cyber protect +1 moreCleartext transmission of sensitive informationCVE-2022-309937.5 High
- acronis cyber protect 15, cyber protect +1 moreCleartext transmission of sensitive informationCVE-2022-309947.5 High
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to insecure folder permissionsCVE-2022-309907.5 High
- acronis snap deployLocal privilege escalation due to insecure folder permissionsCVE-2022-306977.8 High
- acronis snap deployLocal privilege escalation due to a DLL hijacking vulnerabilityCVE-2022-306967.8 High
- acronis snap deployLocal privilege escalation due to excessive permissions assigned to child processesCVE-2022-306957.8 High
- acronis vss doctorLocal privilege escalation due to insecure folder permissionsCVE-2022-04837.8 High
- acronis cyber protect home office, true image 2021, true image +2 moreLocal privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder serviceCVE-2021-442067.3 High
- acronis agent, cyber protect 15, cyber protect home office +3 more +5 moreLocal privilege escalation via named pipe due to improper access control checksCVE-2021-442047.8 High
- acronis cyber protect home office, true image 2021, true image +2 moreLocal privilege escalation due to race condition on application startupCVE-2022-241147.0 High
- acronis cyber protect home office, true image 2021, true image +2 moreLocal privilege escalation due to DLL hijacking vulnerabilityCVE-2021-442057.3 High
- acronis cyber protect home office, true image 2021, true image +2 moreLocal privilege escalation due to unrestricted loading of unsigned librariesCVE-2022-241157.8 High
- acronis agent, cyber protect 15, cyber protect home office +3 more +5 moreLocal privilege escalation due to excessive permissions assigned to child processesCVE-2022-241137.8 High
- acronis agentSensitive information could be loggedCVE-2021-348007.5 High
- acronis cyber protect 15, cyber protect +1 moreSelf cross-site scripting (XSS) was possible on devices pageCVE-2021-442005.4 Medium
- acronis agent, cyber protect 15, cyber protect home office +1 more +3 moreDLL hijacking could lead to denial of serviceCVE-2021-441995.5 Medium
- acronis cyber protect 15, cyber protect +1 moreStored cross-site scripting (XSS) was possible in activity detailsCVE-2021-442025.4 Medium
- acronis cyber protect 15, cyber protect +1 moreStored cross-site scripting (XSS) was possible in protection plan detailsCVE-2021-442035.4 Medium
- Show moreLoading…