Acronis vulnerabilities
206 CVEs and advisories name Acronis as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-41748Remote command execution due to improper input validation.
- CVE-2023-41747Sensitive information disclosure due to unauthenticated path traversal.
- CVE-2023-41746Remote command execution due to improper input validation.
- CVE-2023-41745Sensitive information disclosure due to excessive collection of system information.
- CVE-2023-41744Local privilege escalation due to unrestricted loading of unsigned libraries.
- CVE-2023-41743Local privilege escalation due to insecure driver communication port permissions.
- CVE-2022-46868Local privilege escalation during recovery due to improper soft link handling.
- CVE-2022-45451Local privilege escalation due to insecure driver communication port permissions.
- CVE-2023-41742Excessive attack surface due to binding to an unrestricted IP address.
- CVE-2023-2782Sensitive information disclosure due to improper authorization.
- CVE-2022-4418Local privilege escalation due to unrestricted loading of unsigned libraries.
- CVE-2022-45450Sensitive information disclosure and manipulation due to improper authorization.
- CVE-2022-45459Sensitive information disclosure due to insecure registry permissions.
- CVE-2022-45458Sensitive information disclosure and manipulation due to improper certification validation.
- CVE-2022-45457Sensitive information disclosure and manipulation due to improper certification validation.
- CVE-2022-45452Local privilege escalation due to insecure folder permissions.
- CVE-2022-45453TLS/SSL weak cipher suites enabled.
- CVE-2022-30995Sensitive information disclosure due to improper authentication.
- CVE-2022-3405Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.
- CVE-2023-2360Sensitive information disclosure due to CORS misconfiguration.
- CVE-2023-2355Local privilege escalation due to a DLL hijacking vulnerability.
- CVE-2022-45456Denial of service due to unauthenticated API endpoint.
- CVE-2022-45455Local privilege escalation due to incomplete uninstallation cleanup.
- CVE-2022-45454Sensitive information disclosure due to insecure folder permissions.
- CVE-2022-44746Sensitive information disclosure due to insecure folder permissions.
- CVE-2022-44745Sensitive information leak through log files.
- CVE-2022-44744Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2022-44747Local privilege escalation due to improper soft link handling.
- CVE-2022-44733Local privilege escalation due to insecure folder permissions.
- CVE-2022-44732Local privilege escalation due to insecure folder permissions.