CVE-2023-44207

Published: Sep 27, 2023Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Stored cross-site scripting (XSS) vulnerability in protection plan name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.

Affected (7)

Products: Acronis: Cyber Protect

Acronis

1 product

Cyber Protect

Configuration A

7 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Acronis Cyber Protect	Before 15
Acronis Cyber Protect	Version 15
Acronis Cyber Protect	Version 15 update1
Acronis Cyber Protect	Version 15 update2
Acronis Cyber Protect	Version 15 update3
Acronis Cyber Protect	Version 15 update4
Acronis Cyber Protect	Version 15 update5

Running on/with	Platform Versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://security-advisory.acronis.com/advisories/SEC-5914

Source: security@acronis.com

Vendor Advisory

https://security-advisory.acronis.com/advisories/SEC-5914

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.