Acronis vulnerabilities
206 CVEs and advisories name Acronis as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-30991HTML injection via report name
- CVE-2022-30992Open redirect via user-controlled query parameter
- CVE-2022-30993Cleartext transmission of sensitive information
- CVE-2022-30994Cleartext transmission of sensitive information
- CVE-2022-30990Sensitive information disclosure due to insecure folder permissions
- CVE-2022-30697Local privilege escalation due to insecure folder permissions
- CVE-2022-30696Local privilege escalation due to a DLL hijacking vulnerability
- CVE-2022-30695Local privilege escalation due to excessive permissions assigned to child processes
- CVE-2022-0483Local privilege escalation due to insecure folder permissions
- CVE-2021-44206Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service
- CVE-2021-44204Local privilege escalation via named pipe due to improper access control checks
- CVE-2022-24114Local privilege escalation due to race condition on application startup
- CVE-2021-44205Local privilege escalation due to DLL hijacking vulnerability
- CVE-2022-24115Local privilege escalation due to unrestricted loading of unsigned libraries
- CVE-2022-24113Local privilege escalation due to excessive permissions assigned to child processes
- CVE-2021-34800Sensitive information could be logged
- CVE-2021-44200Self cross-site scripting (XSS) was possible on devices page
- CVE-2021-44199DLL hijacking could lead to denial of service
- CVE-2021-44202Stored cross-site scripting (XSS) was possible in activity details
- CVE-2021-44203Stored cross-site scripting (XSS) was possible in protection plan details
- CVE-2021-44198DLL hijacking could lead to local privilege escalation
- CVE-2021-44201Cross-site scripting (XSS) was possible in notification pop-ups
- CVE-2020-10140Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory.
- CVE-2020-10139Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\.
- CVE-2020-10138Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C
- CVE-2017-3219Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP.