acronis cyber protect 15 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

An issue exists in Acronis Cyber Protect prior to 15 Update 1 build 26172. Because the local notification service misconfigures CORS, information disclosure can occur.

Acronis Cyber Protect Acronis Cyber Protect 15

4.3

CVSSv2

An issue exists in Acronis Cyber Protect prior to 15 Update 1 build 26172. There is cross-site scripting (XSS) in the console.

Acronis Cyber Protect Acronis Cyber Protect 15

4.3

CVSSv2

Reflected cross-site scripting (XSS) was possible on the login page in Acronis Cyber Protect 15 prior to build 27009.

Acronis Cyber Protect Acronis Cyber Protect 15

NA

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows) before build 30984...

Acronis Cyber Protect 15 Acronis Cyber Protect Home Office Acronis Agent

7.2

CVSSv2

Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\. Acronis Cyber Backup and Cyber Protect contain a privileged service that uses this OpenSSL component. Because unprivileged...

Acronis Cyber Backup Acronis Cyber Protect

NA

Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.

Acronis Agent Acronis Cyber Protect 15 Acronis Cyber Protect Home Office -

1.9

CVSSv2

DLL hijacking could lead to denial of service. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27305, Acronis Cyber Protect Home Office (Windows) before build 39612

Acronis Agent -Acronis Cyber Protect Acronis Cyber Protect 15 Acronis Cyber Protect Home Office -

4.6

CVSSv2

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39...

Acronis Agent Acronis Cyber Protect 15 Acronis Cyber Protect Home Office -Acronis True Image 2021

4.6

CVSSv2

Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612,...

Acronis True Image 2021 Acronis Cyber Protect 15 Acronis Cyber Protect Home Office -Acronis Agent

4.6

CVSSv2

Acronis Cyber Protect 15 for Windows prior to build 27009 allowed local privilege escalation via binary hijacking.

Acronis Cyber Protect Acronis Cyber Protect 15

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook