CVE-2023-48681

Self cross-site scripting XSS vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...

CVE-2023-48681

Acronis Cyber Protect 16 (Linux, Windows) before build 37391 has a self XSS vulnerability in the storage nodes search field. The issue allows execution of malicious scripts in the app context. Mitigation: upgrade to build 37391 or later; as a temporary workaround, restrict access to the storage n...

CVE-2023-48681

Self cross-site scripting XSS vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...

CVE-2023-48680

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect 16 macOS, Windows before build 37391...

CVE-2023-48680

CVE-2023-48680 affects Acronis Cyber Protect 16 (macOS, Windows) prior to build 37391. The issue is an information disclosure caused by excessive collection of system information. Impact is information disclosure with confidentiality impact (per CVSS) and is described as a local issue. Remediatio...

CVE-2023-48680

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect 16 macOS, Windows before build 37391...

CVE-2023-48679

Stored cross-site scripting XSS vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...

CVE-2023-48679

CVE-2023-48679 affects Acronis Cyber Protect 16 (Linux/Windows) prior to build 37391. The vulnerability is a stored cross-site scripting (XSS) caused by missing origin validation in postMessage. The PT-2024-13620 entry confirms the affected versions and identifies the root cause as lack of origin...

CVE-2023-48679

Stored cross-site scripting XSS vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...

CVE-2023-48678

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...

CVE-2023-48678

CVE-2023-48678 affects Acronis Cyber Protect 16 (Linux and Windows) before build 37391. Root cause: insecure folder permissions leading to sensitive information disclosure. CVSS 3.1/3.0 base metrics indicate high confidentiality impact with local, low-complexity access and low privileges required...

CVE-2023-48678

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...

Acronis Cyber Protect Cross-Site Scripting Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, network security, and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A cross-site...

PT-2024-13621 · Acronis · Acronis Cyber Protect

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions prior to build 37391 Description: The issue is related to sensitive information disclosure due to excessive collection of system information. Recommendations: For Acronis Cyber Protect 16 versions prior to...

Acronis Cyber Protect Information Disclosure Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, cybersecurity and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. An information...

Acronis Cyber Protect Cross-Site Scripting Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, network security, and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A cross-site...

PT-2024-13622 · Acronis · Acronis Cyber Protect

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions before build 37391 Description: A self cross-site scripting XSS vulnerability exists in the storage nodes search field. This issue allows for the execution of malicious scripts within the context of the...

PT-2024-13619 · Acronis · Acronis Cyber Protect

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions before build 37391 Description: The issue is related to sensitive information disclosure due to insecure folder permissions. Recommendations: For Acronis Cyber Protect 16 versions before build 37391, update t...

Acronis Cyber Protect Cross-Site Scripting Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, network security, and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A cross-site...

Acronis Cyber Protect Security Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, network security and endpoint management features such as vulnerability assessment, URL filtering, patch management and more. A security...