Acronis Cyber Protect 16 (Linux)

CVEs (92)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-44158	Acronis Acronis Cyber Protect 16 (Linux)	Hig	0.49	7.5	0.01	Sep 27, 2023	Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVE-2023-44156	Acronis Cyber Protect	Hig	0.49	7.5	0.01	Sep 27, 2023	Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVE-2023-44155	Acronis Cyber Protect	Hig	0.49	7.5	0.01	Sep 27, 2023	Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVE-2023-44153	Acronis Cyber Protect	Hig	0.49	7.5	0.00	Sep 27, 2023	Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
CVE-2023-41749	Acronis Acronis Agent (Windows)	Hig	0.49	7.5	0.00	Aug 31, 2023	Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Windows) before build 32047, Acronis Cyber Protect 15 (Windows) before build 35979.
CVE-2023-41742	Acronis Acronis Cyber Protect 16 (Linux)	Hig	0.49	7.5	0.00	Aug 31, 2023	Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
CVE-2022-45459	Acronis Acronis Agent (Windows)	Hig	0.49	7.5	0.00	May 18, 2023	Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-45458	Acronis Acronis Cyber Protect 16 (Linux)	Hig	0.49	7.5	0.00	May 18, 2023	Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984.
CVE-2022-45457	Acronis Acronis Agent (Windows)	Hig	0.49	7.5	0.00	May 18, 2023	Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows) before build 29633, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-45453	Acronis Cyber Protect	Hig	0.49	7.5	0.00	May 18, 2023	TLS/SSL weak cipher suites enabled. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 30984.
CVE-2022-45450	Acronis Acronis Cyber Protect 16 (Linux)	Hig	0.49	7.5	0.00	May 18, 2023	Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 30984.
CVE-2022-45454	Acronis Acronis Agent (Windows)	Hig	0.49	7.5	0.00	Feb 13, 2023	Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-30994	Acronis Cyber Protect	Hig	0.49	7.5	0.01	May 18, 2022	Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 29240
CVE-2022-30993	Acronis Cyber Protect	Hig	0.49	7.5	0.01	May 18, 2022	Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240
CVE-2022-30990	Acronis Agent	Hig	0.49	7.5	0.01	May 18, 2022	Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Linux) before build 29240, Acronis Agent (Linux) before build 28037
CVE-2023-45248	Acronis Cyber Protect	Hig	0.47	7.3	0.00	Oct 9, 2023	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36497, Acronis Cyber Protect 16 (Windows) before build 37391.
CVE-2023-45247	Acronis Cyber Protect	Hig	0.46	7.1	0.00	Oct 9, 2023	Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36497, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169.
CVE-2023-45246	Acronis Cyber Protect	Hig	0.46	7.1	0.00	Oct 6, 2023	Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169.
CVE-2023-45244	Acronis Cyber Protect	Hig	0.46	7.1	0.00	Oct 6, 2023	Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 37391.
CVE-2023-44211	Acronis Cyber Protect	Hig	0.46	7.1	0.00	Oct 5, 2023	Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 31637, Acronis Cyber Protect 16 (Linux, Windows) before build 37391.

CVE-2023-44158HigSep 27, 2023
Acronis
Acronis Cyber Protect 16 (Linux)
risk 0.49cvss 7.5epss 0.01
Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVE-2023-44156HigSep 27, 2023
Acronis
Cyber Protect
risk 0.49cvss 7.5epss 0.01
Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVE-2023-44155HigSep 27, 2023
Acronis
Cyber Protect
risk 0.49cvss 7.5epss 0.01
Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVE-2023-44153HigSep 27, 2023
Acronis
Cyber Protect
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
CVE-2023-41749HigAug 31, 2023
Acronis
Acronis Agent (Windows)
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Windows) before build 32047, Acronis Cyber Protect 15 (Windows) before build 35979.
CVE-2023-41742HigAug 31, 2023
Acronis
Acronis Cyber Protect 16 (Linux)
risk 0.49cvss 7.5epss 0.00
Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
CVE-2022-45459HigMay 18, 2023
Acronis
Acronis Agent (Windows)
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-45458HigMay 18, 2023
Acronis
Acronis Cyber Protect 16 (Linux)
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984.
CVE-2022-45457HigMay 18, 2023
Acronis
Acronis Agent (Windows)
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows) before build 29633, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-45453HigMay 18, 2023
Acronis
Cyber Protect
risk 0.49cvss 7.5epss 0.00
TLS/SSL weak cipher suites enabled. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 30984.
CVE-2022-45450HigMay 18, 2023
Acronis
Acronis Cyber Protect 16 (Linux)
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 30984.
CVE-2022-45454HigFeb 13, 2023
Acronis
Acronis Agent (Windows)
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-30994HigMay 18, 2022
Acronis
Cyber Protect
risk 0.49cvss 7.5epss 0.01
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 29240
CVE-2022-30993HigMay 18, 2022
Acronis
Cyber Protect
risk 0.49cvss 7.5epss 0.01
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240
CVE-2022-30990HigMay 18, 2022
Acronis
Agent
risk 0.49cvss 7.5epss 0.01
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Linux) before build 29240, Acronis Agent (Linux) before build 28037
CVE-2023-45248HigOct 9, 2023
Acronis
Cyber Protect
risk 0.47cvss 7.3epss 0.00
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36497, Acronis Cyber Protect 16 (Windows) before build 37391.
CVE-2023-45247HigOct 9, 2023
Acronis
Cyber Protect
risk 0.46cvss 7.1epss 0.00
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36497, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169.
CVE-2023-45246HigOct 6, 2023
Acronis
Cyber Protect
risk 0.46cvss 7.1epss 0.00
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169.
CVE-2023-45244HigOct 6, 2023
Acronis
Cyber Protect
risk 0.46cvss 7.1epss 0.00
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 37391.
CVE-2023-44211HigOct 5, 2023
Acronis
Cyber Protect
risk 0.46cvss 7.1epss 0.00
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 31637, Acronis Cyber Protect 16 (Linux, Windows) before build 37391.

Page 2 of 5