Vulnerabilities

TI-2023-26524 CVE-2023-48682 · GHSA-whg2-vcp6-g5hp

Cross-site scripting in Acronis Cyber Protect 16

LOW 24

Stored cross-site scripting (XSS) vulnerability in unit name.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00334 Published 2024-02-27 Fixed in 37391 CWE-79

TI-2023-26523 CVE-2023-48681 · GHSA-76cj-82j9-gjxf

LOW 27

Self cross-site scripting (XSS) vulnerability in storage nodes search field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.003 Published 2024-02-27 Fixed in 37391 CWE-79

TI-2023-26522 CVE-2023-48680 · GHSA-mmcc-f5rv-h6pc

LOW 24

Sensitive information disclosure due to excessive collection of system information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0017 Published 2024-02-27 Fixed in 37391 CWE-359

TI-2023-26521 CVE-2023-48679 · GHSA-qqr3-c8vc-pm7v

LOW 24

Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0026 Published 2024-02-27 Fixed in 37391 CWE-79

TI-2023-26520 CVE-2023-48678 · GHSA-7vh3-6443-474p

LOW 26

Sensitive information disclosure due to insecure folder permissions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00157 Published 2024-02-27 Fixed in 37391 CWE-276