Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Acronis Component: Cyber Backup Clear all filters
TI-2022-03146 CVE-2022-3405 · GHSA-wrh2-hv24-w22w

Improper privilege management in Acronis Cyber Protect 15

Priority HIGH 73

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.05325 Published 2023-05-03 Fixed in 29486, 16545 CWE-269
TI-2020-08193 CVE-2020-10138 · GHSA-8h9x-6778-m2fg

Improper access control in Acronis Cyber Backup

Priority LOW 35

Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00534 Published 2020-10-21 Fixed in 16363, 24600 CWE-284