Acronis Acronis Cyber Protect 15

• CVE-2025-30416 Critical 10.0 Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Li 0.5%
• CVE-2025-30410 Critical 9.8 Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 39870, Acronis Cyb 0.7%
• CVE-2025-30412 Critical 10.0 Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 ( 0.7%
• CVE-2025-30411 Critical 10.0 Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 ( 0.8%
• CVE-2022-45449 High 7.7 Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 30984. 0.4%
• CVE-2023-44207 Medium 6.7 Stored cross-site scripting (XSS) vulnerability in protection plan name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. 0.6%
• CVE-2023-44206 High 7.1 Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. 1.0%
• CVE-2023-44159 Medium 5.5 Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. 0.7%
• CVE-2023-44156 Medium 5.7 Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. 1.0%
• CVE-2023-44205 Low 3.5 Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. 0.7%
• CVE-2023-44161 Low 3.1 Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. 0.3%
• CVE-2023-44160 Low 3.1 Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. 0.3%
• CVE-2023-44158 Low 3.5 Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. 0.8%
• CVE-2023-44157 Low 3.3 Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 35979. 0.3%
• CVE-2023-44155 Medium 4.4 Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. 1.1%
• CVE-2023-44154 Medium 4.6 Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. 0.8%
• CVE-2023-44153 Low 2.2 Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979. 0.4%
• CVE-2023-44152 Medium 6.1 Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979. 0.9%
• CVE-2023-41749 Medium 4.4 Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Windows) before build 32047, Acronis Cyber Protect 15 (Windows) 0.4%
• CVE-2023-41745 Medium 6.1 Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30991, Acronis Cyber Protect 0.2%
• CVE-2023-41744 High 7.8 Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before bui 0.1%
• CVE-2023-41743 High 8.8 Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Cyber Pro 0.4%
• CVE-2022-45451 High 8.8 Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Wi 0.5%
• CVE-2023-41742 Medium 4.3 Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, m 0.5%
• CVE-2022-45450 Medium 5.4 Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 0.4%
• CVE-2022-45459 Low 3.8 Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 0.3%
• CVE-2022-45458 Medium 4.2 Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber 0.4%
• CVE-2022-45457 Medium 4.2 Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows) before build 29633, Acronis Cyber Protect 15 (W 0.4%
• CVE-2022-45452 High 7.3 Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30430, Acronis Cyber Protect 15 (Windows) before build 30984. 0.2%
• CVE-2022-45453 Medium 5.3 TLS/SSL weak cipher suites enabled. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 30984. 0.3%
• CVE-2022-30995 Critical 9.3 Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, 3.3%
• CVE-2022-3405 Critical 9.3 Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 2 5.3%
• CVE-2022-45455 Medium 6.6 Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before 0.1%
• CVE-2022-45454 Low 2.2 Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis Cyber Protect 15 (Windows) before build 30 0.3%
• CVE-2022-30991 Unrated HTML injection via report name 0.6%
• CVE-2022-30992 Unrated Open redirect via user-controlled query parameter 0.6%
• CVE-2022-30993 Unrated Cleartext transmission of sensitive information 0.6%
• CVE-2022-30994 Unrated Cleartext transmission of sensitive information 0.6%
• CVE-2022-30990 Unrated Sensitive information disclosure due to insecure folder permissions 0.9%
• CVE-2021-44204 Unrated Local privilege escalation via named pipe due to improper access control checks 0.2%
• CVE-2022-24113 Unrated Local privilege escalation due to excessive permissions assigned to child processes 0.2%
• CVE-2021-44200 Unrated Self cross-site scripting (XSS) was possible on devices page 0.5%
• CVE-2021-44199 Unrated DLL hijacking could lead to denial of service 0.2%
• CVE-2021-44202 Unrated Stored cross-site scripting (XSS) was possible in activity details 0.5%
• CVE-2021-44203 Unrated Stored cross-site scripting (XSS) was possible in protection plan details 0.5%
• CVE-2021-44198 Unrated DLL hijacking could lead to local privilege escalation 0.3%
• CVE-2021-44201 Unrated Cross-site scripting (XSS) was possible in notification pop-ups 0.6%