Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in agent-related functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows rem…
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in encrypted share umount functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 a…
An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installatio…
CVSS 3.1MEDIUM 6.1·Local·No auth·User interaction·EPSS 0.00086·Published 2026-05-27·Fixed in 3.1.0-4967CWE-346
Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vecto…
CVSS 3.1MEDIUM 5.5·Local·Low privileges·No interaction·EPSS 0.00176·Published 2024-09-26·Fixed in 2.7.0-3221CWE-306
Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credential via unspecified v…
CVSS 3.1MEDIUM 5.3·Adjacent network·No auth·No interaction·EPSS 0.0008·Published 2024-09-26·Fixed in 2.7.0-3221CWE-311
Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.
CVSS 3.1MEDIUM 5.0·Local·Low privileges·User interaction·EPSS 0.00085·Published 2024-09-26·Fixed in 2.7.0-3221CWE-311
Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecified vectors.
CVSS 3.1MEDIUM 4.0·Local·No auth·No interaction·EPSS 0.00164·Published 2024-09-26·Fixed in 2.7.0-3221CWE-306
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in share file list functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows r…