acronis Vulnerability Advisory Catalog

Total 171 security vulnerabilities recorded for acronis software and firmware.

← Back to All Vendors
Component: cyber_protect

Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 29240...

📅 2022-05-18
CVSS 7.5 Dossier →
Component: cyber_protect

Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240...

📅 2022-05-18
CVSS 7.5 Dossier →
Component: cyber_protect

Open redirect via user-controlled query parameter. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240...

📅 2022-05-18
CVSS 6.1 Dossier →
Component: cyber_protect

HTML injection via report name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240...

📅 2022-05-18
CVSS 6.1 Dossier →
Component: cyber_protect

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Linux) before buil...

📅 2022-05-18
CVSS 7.5 Dossier →
Component: snap_deploy

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 3640...

📅 2022-05-16
CVSS 7.8 Dossier →
Component: snap_deploy

Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 3640...

📅 2022-05-16
CVSS 7.8 Dossier →
Component: snap_deploy

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Snap Deploy (Windows...

📅 2022-05-16
CVSS 7.8 Dossier →
Component: vss_doctor

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor (Windows) before build 53...

📅 2022-02-11
CVSS 7.8 Dossier →
Component: true_image

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office (...

📅 2022-02-04
CVSS 7.8 Dossier →
Component: true_image

Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macOS...

📅 2022-02-04
CVSS 7.0 Dossier →
Component: agent

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Wi...

📅 2022-02-04
CVSS 7.8 Dossier →
Component: true_image

Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service. The following products are affected: Acronis Cyber Pro...

📅 2022-02-04
CVSS 7.3 Dossier →
Component: true_image

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before...

📅 2022-02-04
CVSS 7.3 Dossier →
Component: true_image

Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Window...

📅 2022-02-04
CVSS 7.8 Dossier →
Component: agent

Sensitive information could be logged. The following products are affected: Acronis Agent (Windows, Linux, macOS) before build 27147...

📅 2021-11-29
CVSS 7.5 Dossier →
Component: cyber_protect

Stored cross-site scripting (XSS) was possible in protection plan details. The following products are affected: Acronis Cyber Protect 15 (Windows, Lin...

📅 2021-11-29
CVSS 5.4 Dossier →
Component: cyber_protect

Stored cross-site scripting (XSS) was possible in activity details. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) bef...

📅 2021-11-29
CVSS 5.4 Dossier →
Component: cyber_protect

Cross-site scripting (XSS) was possible in notification pop-ups. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before...

📅 2021-11-29
CVSS 6.1 Dossier →
Component: cyber_protect

Self cross-site scripting (XSS) was possible on devices page. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before bu...

📅 2021-11-29
CVSS 5.4 Dossier →
Component: agent

DLL hijacking could lead to denial of service. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Age...

📅 2021-11-29
CVSS 5.5 Dossier →
Component: cyber_protect

DLL hijacking could lead to local privilege escalation. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035...

📅 2021-11-29
CVSS 7.8 Dossier →
Component: cyber_protect

Acronis Cyber Protect 15 for Windows prior to build 27009 allowed local privilege escalation via binary hijacking....

📅 2021-08-12
CVSS 7.8 Dossier →
Component: cyber_protect

Reflected cross-site scripting (XSS) was possible on the login page in Acronis Cyber Protect 15 prior to build 27009....

📅 2021-08-12
CVSS 6.1 Dossier →
Page 6 of 8 (171 Total Records)