Vulnerabilities

TI-2023-23739 CVE-2023-44207 · GHSA-f7pw-m243-8v8p

Cross-site scripting in Acronis Cyber Protect 15

LOW 25

Stored cross-site scripting (XSS) vulnerability in protection plan name.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00629 Published 2023-09-27 Fixed in 35979 CWE-79

TI-2023-23738 CVE-2023-44206 · GHSA-vj6p-v8m8-9cjq

Authorization bypass in Acronis Cyber Protect 15

MEDIUM 49

Sensitive information disclosure and manipulation due to improper authorization.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01027 Published 2023-09-27 Fixed in 35979 CWE-639

TI-2023-23699 CVE-2023-44159 · GHSA-rrx9-x9wf-g3vh

Cleartext storage of sensitive information in Acronis Cyber Protect 15

LOW 34

Sensitive information disclosure due to cleartext storage of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00674 Published 2023-09-27 Fixed in 35979 CWE-312

TI-2023-23696 CVE-2023-44156 · GHSA-453j-gwgw-838r

Sensitive information disclosure due to spell-jacking.

LOW 35

Sensitive information disclosure due to spell-jacking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01043 Published 2023-09-27 Fixed in 35979 CWE-359

TI-2023-23737 CVE-2023-44205 · GHSA-3c96-jfc7-h3r6

Authorization bypass in Acronis Cyber Protect 15

LOW 25

Sensitive information disclosure due to improper authorization.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00717 Published 2023-09-27 Fixed in 35979 CWE-639

TI-2023-23701 CVE-2023-44161 · GHSA-3r5r-ff5q-4gx4

Cross-site request forgery in Acronis Cyber Protect 15

LOW 29

Sensitive information manipulation due to cross-site request forgery.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00286 Published 2023-09-27 Fixed in 35979 CWE-352

TI-2023-23700 CVE-2023-44160 · GHSA-mpjh-frf7-2xf5

Cross-site request forgery in Acronis Cyber Protect 15

LOW 29

Sensitive information manipulation due to cross-site request forgery.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00286 Published 2023-09-27 Fixed in 35979 CWE-352

TI-2023-23698 CVE-2023-44158 · GHSA-x7j8-2fx2-vhwq

Insufficiently protected credentials in Acronis Cyber Protect 15

LOW 34

Sensitive information disclosure due to insufficient token field masking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0079 Published 2023-09-27 Fixed in 35979 CWE-522

TI-2023-23697 CVE-2023-44157 · GHSA-j328-7fg7-x9f2

Incorrect default permissions in Acronis Cyber Protect 15

LOW 34

Local privilege escalation due to insecure folder permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00253 Published 2023-09-27 Fixed in 35979 CWE-276

TI-2023-23695 CVE-2023-44155 · GHSA-8f74-pq25-4xr2

Sensitive information leak through log files in Acronis Cyber Protect 15

LOW 35

Sensitive information leak through log files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01101 Published 2023-09-27 Fixed in 35979 CWE-532

TI-2023-23694 CVE-2023-44154 · GHSA-ghrw-x6cv-mr95

Authorization bypass in Acronis Cyber Protect 15

LOW 37

Sensitive information disclosure and manipulation due to improper authorization.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00755 Published 2023-09-27 Fixed in 35979 CWE-639

TI-2023-23693 CVE-2023-44153 · GHSA-x328-gfw7-cr8v

Cleartext storage of sensitive information in Acronis Cyber Protect 15

LOW 33

Sensitive information disclosure due to cleartext storage of sensitive information in memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00357 Published 2023-09-27 Fixed in 35979 CWE-316

TI-2023-23692 CVE-2023-44152 · GHSA-pjp5-qqc6-2qcq

Missing authentication in Acronis Cyber Protect 15

MEDIUM 41

Sensitive information disclosure and manipulation due to improper authentication.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00904 Published 2023-09-27 Fixed in 35979 CWE-306

Vulnerabilities

Filters