CVE-2024-47265

CVE-2024-47265 is a path traversal vulnerability in Synology Active Backup for Business with improper limitation of a pathname to a restricted directory. Affects multiple pre-2.7.1-13234/2.7.1-23234/2.7.1-3234 builds where remote authenticated users can write specific files via unspecified vector...

CVE-2024-47264

CVE-2024-47264 affects Synology Active Backup for Business. The issue is an improper limitation of a pathname to a restricted directory in the agent-related functionality, enabling a remote authenticated user with administrator privileges to delete arbitrary files. Affected versions are before 2....

CVE-2024-47266

CVE-2024-47266 affects Synology Active Backup for Business, where the share file list functionality is vulnerable to path traversal. Before versions 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234, remote authenticated users with administrator privileges can read specific files containing non-sensitive i...

CVE-2023-52949

CVE-2023-52949 affects Synology Active Backup for Business Agent prior to 2.7.0-3221. The issue is a missing authentication for a critical function in the proxy settings, allowing local users to obtain credentials via unspecified vectors. CVSSv3.1 base metrics indicate a Local attack with Low com...

CVE-2023-52950

CVE-2023-52950 affects Synology Active Backup for Business Agent’s login component. The root cause is missing encryption of sensitive data, enabling adjacent (local) attackers to perform MITM-style credential exposure via unspecified vectors. Impact is confined to confidentiality loss of user cre...

CVE-2023-52948

CVE-2023-52948 concerns Synology Active Backup for Business Agent prior to version 2.7.0-3221, where a missing encryption of sensitive data in the settings functionality could allow local users to obtain user credentials via unspecified vectors. The CVSS 3.1 base metrics indicate Local attack vec...

CVE-2023-52947

CVE-2023-52947 affects Synology Active Backup for Business Agent prior to 2.6.3-3101, where a missing authentication in the logout function allows local users to log out the client via unspecified vectors. The backup process remains operational. Remediation: upgrade to 2.6.3-3101 or later. No exp...

CVE-2025-66592

CVE-2025-66592 : An origin validation error affects Synology Active Backup for Business Agent prior to version 3.1.0-4967. The flaw allows local users to write arbitrary files with restricted content during installation, indicating a path traversal/origin-check weakness in the installer process. ...