Vulnerabilities

TI-2021-19894 CVE-2021-44200 · GHSA-g46v-hp5m-3wgf

Cross-site scripting in Acronis Cyber Protect 15

LOW 25

Self cross-site scripting (XSS) was possible on devices page.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00466 Published 2021-11-29 Fixed in 28035 CWE-79

TI-2021-19893 CVE-2021-44199 · GHSA-r24c-4jp9-g34v

LOW 24

DLL hijacking could lead to denial of service.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00233 Published 2021-11-29 Fixed in 28035, 27305 +1 CWE-427

TI-2021-19896 CVE-2021-44202 · GHSA-x7r8-5fvw-c54g

LOW 25

Stored cross-site scripting (XSS) was possible in activity details.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00466 Published 2021-11-29 Fixed in 28035 CWE-79

TI-2021-19897 CVE-2021-44203 · GHSA-3m7g-q8jw-q449

LOW 25

Stored cross-site scripting (XSS) was possible in protection plan details.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00466 Published 2021-11-29 Fixed in 28035 CWE-79

TI-2021-19892 CVE-2021-44198 · GHSA-c2cr-q5v4-8ccv

LOW 34

DLL hijacking could lead to local privilege escalation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00255 Published 2021-11-29 Fixed in 28035 CWE-427

TI-2021-19895 CVE-2021-44201 · GHSA-7fmj-f47p-w477

LOW 28

Cross-site scripting (XSS) was possible in notification pop-ups.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00581 Published 2021-11-29 Fixed in 28035 CWE-79