247 matches found
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage
...
Sensitive information disclosure during file browsing due to improper symbolic link handling
Acronis Backup plugin for cPanel & WHM had a vulnerability in handling symbolic links during file browsing. This vulnerability allowed plugin users with unprivileged local access to the server to view file names in directories they normally could not access. By creating a symbolic link in their...
Arbitrary file overwrite during recovery due to improper symbolic link handling
Acronis Backup plugins for cPanel & WHM, Plesk and DirectAdmin improperly handled symbolic links during recovery. This allowed plugin users with unprivileged local access to the server to overwrite arbitrary files on the server. They could achieve this by creating a symbolic link in their home...
Stored cross-site scripting (XSS) vulnerability on enrollment invitation page
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure due to spell-jacking
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure due to insecure folder permissions
Acronis Snap Deploy 6 License Server stored license serial numbers in cleartext in the file C:\ProgramData\Acronis\License Server\keys.xml, which was accessible to all users on the system. This allowed an authenticated local attacker with access to the file to retrieve and misuse the serial numbe...
Remote command execution due to use of default passwords
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure due to missing authorization
...
Sensitive information manipulation due to cross-site request forgery
...
Sensitive information disclosure due to unauthenticated path traversal
Sensitive information disclosure was possible in Acronis Cloud Manager before build 6.2.23089.203 due to an unauthenticated path traversal vulnerability. This allowed an unauthenticated user on an adjacent network to read local files on the machine where Acronis Cloud Manager was installed...
Local privilege escalation during recovery due to improper soft link handling
...
Local privilege escalation due to insecure folder permissions
...
A logic bug in system monitoring driver allows to bypass Windows memory protection and access sensitive data
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to improper soft link handling
...
Acronis True Image is vulnerable to privilege escalation via openssl.cnf file
...
Security update of Linux kernel
Linux kernel was updated to address multiple high severity vulnerabilities...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to EXE hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to improper input validation
...
Local privilege escalation due to improper input validation
...
OpenSSL high severity vulnerability CVE-2025-15467
OpenSSL disclosed CVE-2025-15467, initially rated as critical and later revised to high severity. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerability, as the impacted functionality is not in use...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of third-party dependencies
...
Local privilege escalation due to improper soft link handling
...
Unauthorized resource manipulation due to improper authorization checks
...
Local privilege escalation due to improper directory permissions
...
Sensitive information disclosure and manipulation due to insufficient authorization checks
...
Unnecessary transmission of sensitive cryptographic material
...
Local privilege escalation due to improper soft link handling
...
Local privilege escalation due to DLL hijacking vulnerability
...
Information disclosure and manipulation due to improper authorization checks
...
Unauthorized report deletion due to insufficient access control
...
Sensitive information disclosure due to improper access control
...
Unauthorized resource manipulation due to improper authorization checks
...
Local privilege escalation due to insecure folder permissions
...
Sensitive data disclosure and manipulation due to missing authorization
...
Sensitive data disclosure and manipulation due to improper authentication
...
Sensitive information disclosure due to SSRF
...
Local privilege escalation due to insecure file permissions
...
Denial of service due to allocation of resources without limits
...
Local privilege escalation due to excessive permissions assigned to Tray Monitor service
...