CVE-2021-44201: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS was possible in notification pop-ups. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

CVE-2021-44200: Improper Neutralization of Input During Web Page Generation

Self cross-site scripting XSS was possible on devices page. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

Acronis Agent 日志信息泄露漏洞

Acronis Agent is an agent software from Acronis Singapore. Acronis Agent suffers from a log information disclosure vulnerability that stems from the fact that sensitive information about the product is recorded in log files, which can be exploited by an attacker to record sensitive information...

TIETEN Acronis Cyber Protect 跨站脚本漏洞

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 suffers from a cross-site scriptin...

TIETEN Acronis Cyber Protect 跨站脚本漏洞

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool. Acronis Cyber Protect 15 suffers from a cross-site scripti...

TIETEN Acronis Cyber Protect 代码问题漏洞

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, AI-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 suffers from a DLL hijacking vulnerability that could b...

CVE-2021-44203: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting XSS was possible in protection plan details. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

CVE-2021-44198: Uncontrolled Search Path Element

DLL hijacking could lead to local privilege escalation. The following products are affected: Acronis Cyber Protect 15 Windows before build 28035...

CVE-2021-34800: Insertion of Sensitive Information into Log File

Sensitive information could be logged. The following products are affected: Acronis Agent Windows, Linux, macOS before build 27147...

Acronis Agent 代码问题漏洞

Acronis Agent and others are are products of Singapore-based Acronis. A DLL hijacking vulnerability exists in several Acronis products, which can be exploited by attackers to cause a denial of service...

CVE-2021-44202: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting XSS was possible in activity details. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

TIETEN Acronis Cyber Protect 跨站脚本漏洞

Acronis Cyber Protect is an application. providing unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 suffers from a cross-site scripti...

TIETEN Acronis Cyber Protect 跨站脚本漏洞

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool. Acronis Cyber Protect 15 suffers from a cross-site scripti...

PT-2021-20658

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 27147 Description: Sensitive information could be logged. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where...

CVE-2021-34800

Sensitive information could be logged. The following products are affected: Acronis Agent Windows, Linux, macOS before build 27147...

CVE-2021-44201

Cross-site scripting XSS was possible in notification pop-ups. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

PT-2021-24061

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions prior to build 28035 Description: A self cross-site scripting XSS issue was possible on the devices page. This allows an attacker to potentially inject malicious scripts into the webpage, affecting the user's...

PT-2021-24062

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions prior to build 28035 Description: A cross-site scripting XSS issue was possible in notification pop-ups. This allowed for potential malicious script execution. The estimated number of potentially affected...

PT-2021-24063

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions prior to build 28035 Description: A stored cross-site scripting XSS issue was possible in activity details. This could potentially allow attackers to inject malicious scripts into the application...

PT-2021-24060

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 Windows versions prior to build 28035 Acronis Agent Windows versions prior to build 27305 Acronis Cyber Protect Home Office Windows versions prior to build 39612 Description: A DLL hijacking issue could lead to a deni...