Page 6 of 47 results (0.008 seconds)

CVSS: 9.3EPSS: 0%CPEs: 21EXPL: 0

CVE-2022-30995

https://notcve.org/view.php?id=CVE-2022-30995

Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545. • https://security-advisory.acronis.com/advisories/SEC-3855 https://herolab.usd.de/security-advisories/usd-2022-0008 https://attackerkb.com/topics/27RudJXbN4/cve-2022-30995 • CWE-287: Improper Authentication •

CVSS: 9.3EPSS: 1%CPEs: 21EXPL: 1

CVE-2022-3405

https://notcve.org/view.php?id=CVE-2022-3405

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545. • https://herolab.usd.de/security-advisories/usd-2022-0008 https://security-advisory.acronis.com/advisories/SEC-4092 https://attackerkb.com/topics/27RudJXbN4/cve-2022-30995 • CWE-269: Improper Privilege Management •

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0

CVE-2022-45455

https://notcve.org/view.php?id=CVE-2022-45455

Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984. • https://security-advisory.acronis.com/advisories/SEC-4459 • CWE-459: Incomplete Cleanup •

CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0

CVE-2022-45454

https://notcve.org/view.php?id=CVE-2022-45454

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis Cyber Protect 15 (Windows) before build 30984. • https://security-advisory.acronis.com/advisories/SEC-4379 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-276: Incorrect Default Permissions •

CVSS: 6.1EPSS: 0%CPEs: 7EXPL: 0

CVE-2022-30991 – HTML injection via report name

https://notcve.org/view.php?id=CVE-2022-30991

HTML injection via report name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240 Una Inyección de HTML por medio del nombre del informe. Los siguientes productos están afectados: Acronis Cyber Protect 15 (Linux, Windows) versiones anteriores a 29240 • https://security-advisory.acronis.com/advisories/SEC-3928 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •