Acronis vulnerabilities
206 CVEs and advisories name Acronis as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-49384Excessive attack surface in acep-collector service due to binding to an unrestricted IP address.
- CVE-2024-49383Excessive attack surface in acep-importer service due to binding to an unrestricted IP address.
- CVE-2024-49382Excessive attack surface in archive-server service due to binding to an unrestricted IP address.
- CVE-2024-8903Local active protection service settings manipulation due to unnecessary privileges assignment.
- CVE-2024-8767Sensitive data disclosure and manipulation due to unnecessary privileges assignment.
- CVE-2024-8766Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2024-34016Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2024-34018Sensitive information disclosure due to insecure folder permissions.
- CVE-2024-34017Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2024-34019Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2023-45249Remote command execution due to use of default passwords.
- CVE-2024-34013Local privilege escalation due to OS command injection vulnerability.
- CVE-2022-45449Sensitive information disclosure due to excessive privileges assigned to Acronis Agent.
- CVE-2024-34012Local privilege escalation due to insecure folder permissions.
- CVE-2024-34011Local privilege escalation due to insecure folder permissions.
- CVE-2024-34010Local privilege escalation due to unquoted search path vulnerability.
- CVE-2023-48684Sensitive information disclosure and manipulation due to missing authorization.
- CVE-2023-48683Sensitive information disclosure and manipulation due to missing authorization.
- CVE-2023-48682Stored cross-site scripting (XSS) vulnerability in unit name.
- CVE-2023-48681Self cross-site scripting (XSS) vulnerability in storage nodes search field.
- CVE-2023-48680Sensitive information disclosure due to excessive collection of system information.
- CVE-2023-48679Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage.
- CVE-2023-48678Sensitive information disclosure due to insecure folder permissions.
- CVE-2023-48676Sensitive information disclosure and manipulation due to missing authorization.
- CVE-2023-48677Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2023-45247Sensitive information disclosure and manipulation due to missing authorization.
- CVE-2023-45248Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2023-45246Sensitive information disclosure and manipulation due to missing authorization.
- CVE-2023-45245Sensitive information disclosure due to missing authorization.
- CVE-2023-45244Sensitive information disclosure and manipulation due to missing authorization.