Acronis Cyber Protect 15 Update 4

CPE Details

Acronis Cyber Protect 15 Update 4
acronis
cyber_protect
15
2023-09-28
14h37 +00:00
2023-09-28
14h37 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:acronis:cyber_protect:15:update4:*:*:*:*:*:*

Informations

Vendor

acronis

Product

cyber_protect

Version

15

Update

update4

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-49388 2024-10-15 10h34 +00:00 Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
9.1
Critique
CVE-2024-49387 2024-10-15 10h34 +00:00 Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
7.5
Haute
CVE-2024-49384 2024-10-15 10h33 +00:00 Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
4.3
Moyen
CVE-2024-49383 2024-10-15 10h33 +00:00 Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
4.3
Moyen
CVE-2024-49382 2024-10-15 10h32 +00:00 Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
4.3
Moyen
CVE-2023-48682 2024-02-27 16h53 +00:00 Stored cross-site scripting (XSS) vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
5.4
Moyen
CVE-2023-48681 2024-02-27 16h52 +00:00 Self cross-site scripting (XSS) vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
6.1
Moyen
CVE-2023-48680 2024-02-27 16h51 +00:00 Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect 16 (macOS, Windows) before build 37391.
5.5
Moyen
CVE-2023-48679 2024-02-27 16h45 +00:00 Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
5.4
Moyen
CVE-2023-48678 2024-02-27 16h45 +00:00 Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
5.5
Moyen
CVE-2023-44207 2023-09-27 12h02 +00:00 Stored cross-site scripting (XSS) vulnerability in protection plan name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
5.4
Moyen
CVE-2023-44206 2023-09-27 12h02 +00:00 Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
9.1
Critique
CVE-2023-44159 2023-09-27 12h02 +00:00 Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
7.5
Haute
CVE-2023-44156 2023-09-27 12h01 +00:00 Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
7.5
Haute
CVE-2023-44205 2023-09-27 12h01 +00:00 Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
5.3
Moyen
CVE-2023-44161 2023-09-27 12h01 +00:00 Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
6.5
Moyen
CVE-2023-44160 2023-09-27 12h01 +00:00 Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
6.5
Moyen
CVE-2023-44158 2023-09-27 12h01 +00:00 Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
7.5
Haute
CVE-2023-44157 2023-09-27 12h01 +00:00 Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 35979.
7.8
Haute
CVE-2023-44155 2023-09-27 12h00 +00:00 Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
7.5
Haute
CVE-2023-44154 2023-09-27 12h00 +00:00 Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
8.1
Haute
CVE-2023-44153 2023-09-27 12h00 +00:00 Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
7.5
Haute
CVE-2023-44152 2023-09-27 11h59 +00:00 Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
9.1
Critique
CVE-2023-41749 2023-08-31 20h17 +00:00 Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Windows) before build 32047, Acronis Cyber Protect 15 (Windows) before build 35979.
7.5
Haute
CVE-2023-41745 2023-08-31 17h16 +00:00 Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30991, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
5.5
Moyen
CVE-2023-41744 2023-08-31 15h14 +00:00 Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.
7.8
Haute
CVE-2023-41743 2023-08-31 15h04 +00:00 Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Agent (Windows) before build 31637, Acronis Cyber Protect 15 (Windows) before build 35979.
7.8
Haute
CVE-2023-41742 2023-08-31 14h27 +00:00 Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
7.5
Haute
CVE-2022-45450 2023-05-18 09h27 +00:00 Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 30984.
7.5
Haute
CVE-2022-45459 2023-05-18 09h26 +00:00 Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
7.5
Haute
CVE-2022-45458 2023-05-18 09h25 +00:00 Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984.
7.5
Haute
CVE-2022-45457 2023-05-18 09h23 +00:00 Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows) before build 29633, Acronis Cyber Protect 15 (Windows) before build 30984.
7.5
Haute
CVE-2022-45452 2023-05-18 09h21 +00:00 Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30430, Acronis Cyber Protect 15 (Windows) before build 30984.
7.8
Haute
CVE-2022-45453 2023-05-18 09h19 +00:00 TLS/SSL weak cipher suites enabled. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 30984.
7.5
Haute
CVE-2022-45455 2023-02-13 09h27 +00:00 Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
7.8
Haute
CVE-2022-45454 2023-02-13 09h25 +00:00 Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis Cyber Protect 15 (Windows) before build 30984.
7.5
Haute