264 matches found
Local privilege escalation due to insecure file permissions
Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin for cPanel & WHM deployments...
Unauthenticated attacker having local code execution may tamper with microservice API
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure and manipulation due to improper authorization
...
Replace satori/go.uuid dependency
...
Sensitive information disclosure due to improper authorization
...
Sensitive information disclosure due to insufficient token field masking
...
Sensitive information disclosure and manipulation due to improper certification validation
...
Local privilege escalation due to insecure folder permissions
...
MOVEit transfer critical vulnerability
The Progress Community team released a security advisory and fixes for one critical severity security issue affecting all MOVEit Transfer versions. The issue was assigned CVE-2023-34362. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerabilit...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local active protection service settings manipulation due to unnecessary privileges assignment
...
Local privilege escalation due to DLL hijacking vulnerability
...
Remote command execution due to use of default passwords
...
Security update of Linux kernel
Linux kernel was updated to address multiple high severity vulnerabilities...
Security update of third-party dependencies
...
Local privilege escalation due to insecure Unix socket permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information manipulation due to cross-site request forgery
...
Local privilege escalation due to a binary hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Security update of Socket.io JavaScript library
Socket.io JavaScript library was updated to address a medium severity vulnerability...
Local privilege escalation due to improper soft link handling
...
Sensitive information disclosure due to improper access control
...
Security update of libxml2 dependency
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information manipulation due to cross-site request forgery
...
Local privilege escalation due to incomplete uninstallation cleanup
...
OpenSSL high severity vulnerability CVE-2025-15467
OpenSSL disclosed CVE-2025-15467, initially rated as critical and later revised to high severity. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerability, as the impacted functionality is not in use...
Unnecessary transmission of sensitive cryptographic material
...
Local privilege escalation due to improper soft link handling
...
Security update of Elasticsearch dependency
...
Security update of Apache HTTP Server
Apache HTTP Server was updated to address a high severity vulnerability...
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure and manipulation due to insufficient authorization checks
...
Unauthorized modification of settings due to insufficient authorization checks
...
Local privilege escalation due to insecure folder permissions
...
Weak server key used for TLS encryption
...
Sensitive information disclosure during file browsing due to improper symbolic link handling
Acronis Backup plugin for cPanel & WHM had a vulnerability in handling symbolic links during file browsing. This vulnerability allowed plugin users with unprivileged local access to the server to view file names in directories they normally could not access. By creating a symbolic link in their...
Sensitive information disclosure due to insecure folder permissions
Acronis Snap Deploy 6 License Server stored license serial numbers in cleartext in the file C:\ProgramData\Acronis\License Server\keys.xml, which was accessible to all users on the system. This allowed an authenticated local attacker with access to the file to retrieve and misuse the serial numbe...
Stored cross-site scripting (XSS) vulnerability in unit name
...
Stored cross-site scripting (XSS) vulnerability in protection plan name
...
Sensitive information disclosure due to unauthenticated path traversal
Sensitive information disclosure was possible in Acronis Cloud Manager before build 6.2.23089.203 due to an unauthenticated path traversal vulnerability. This allowed an unauthenticated user on an adjacent network to read local files on the machine where Acronis Cloud Manager was installed...