Vulnerabilities

TI-2024-36868 CVE-2024-55541 · GHSA-p4mj-rcrm-4875

Cross-site scripting in Acronis Cyber Protect 16

LOW 27

Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00294 Published 2025-01-02 Fixed in 39169 CWE-79

TI-2024-36869 CVE-2024-55542 · GHSA-mqq8-g3vp-xw37

LOW 22

Local privilege escalation due to excessive permissions assigned to Tray Monitor service.

CVSS 3.0MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00166 Published 2025-01-02 Fixed in 39169, 35895 CWE-266

TI-2024-37344 CVE-2024-56414 · GHSA-pfv5-96r6-w6p5

LOW 24

Web installer integrity check used weak hash algorithm.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00111 Published 2025-01-02 Fixed in 39169 CWE-328

TI-2024-37343 CVE-2024-56413 · GHSA-r954-pff6-j82v

LOW 29

Missing session invalidation after user deletion.

CVSS 3.0MEDIUM 6.1 Adjacent network High privileges No interaction EPSS 0.00233 Published 2025-01-02 Fixed in 39169 CWE-613

TI-2024-36867 CVE-2024-55540 · GHSA-c85g-7vc6-q29w

LOW 35

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00164 Published 2025-01-02 Fixed in 39169 CWE-427

TI-2024-36870 CVE-2024-55543 · GHSA-274c-jx98-whwv

LOW 35

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00165 Published 2025-01-02 Fixed in 39169 CWE-427