← Back

Acronis

acronis

172 CVEs • 15 products

Products (15)

Click to collapse
Toggle
Cyber Protect
cyber_protect
86 CVEs
Agent
agent
45 CVEs
True Image
true_image
25 CVEs
Cyber Protect Home Office
cyber_protect_home_office
22 CVEs
Snap Deploy
snap_deploy
9 CVEs
Cyber Files
cyber_files
5 CVEs
Cyber Backup
cyber_backup
4 CVEs
Cloud Manager
cloud_manager
4 CVEs
True Image 2020
true_image_2020
3 CVEs
Cyber Infrastructure
cyber_infrastructure
3 CVEs
True Image Windows Agent
true_image_windows_agent
1 CVE
True Image Echo Server
true_image_echo_server
1 CVE
Cyber Protect Cloud
cyber_protect_cloud
1 CVE
Cyber Protection Agent
cyber_protection_agent
1 CVE
Vss Doctor
vss_doctor
1 CVE

CVEs (172)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-49383
1Acronis
1Cyber Protect
Jun 17, 2026
Oct 15, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
CVE-2024-49382
1Acronis
1Cyber Protect
Jun 17, 2026
Oct 15, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
CVE-2024-34019
1Acronis
1Snap Deploy
Jun 17, 2026
Aug 29, 2024
N/A· v4
7.3 HIGH· v3
N/A· v2
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
CVE-2024-34018
1Acronis
1Snap Deploy
Jun 17, 2026
Aug 29, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
CVE-2024-34017
1Acronis
1Snap Deploy
Jun 17, 2026
Aug 29, 2024
N/A· v4
7.3 HIGH· v3
N/A· v2
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
CVE-2023-45249
1Acronis
1Cyber Infrastructure
Jun 17, 2026
Jul 24, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis C...Show more
Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.Show less
CVE-2022-45449
1Acronis
1Cyber Protect
Jun 17, 2026
Jul 16, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 30984.
CVE-2024-34012
1Acronis
1Cloud Manager
Jun 17, 2026
Jun 14, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.24135.272.
CVE-2023-48682
1Acronis
1Cyber Protect
Jun 17, 2026
Feb 27, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Stored cross-site scripting (XSS) vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
CVE-2023-48681
1Acronis
1Cyber Protect
Jun 17, 2026
Feb 27, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Self cross-site scripting (XSS) vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
CVE-2023-48680
1Acronis
1Cyber Protect
Jun 17, 2026
Feb 27, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect 16 (macOS, Windows) before build 37391.
CVE-2023-48679
1Acronis
1Cyber Protect
Jun 17, 2026
Feb 27, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
CVE-2023-48678
1Acronis
1Cyber Protect
Jun 17, 2026
Feb 27, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
CVE-2023-48676
1Acronis
1Agent
Jun 17, 2026
Dec 14, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36943.
CVE-2023-48677
1Acronis
1Cyber Protect Home Office
Jun 17, 2026
Dec 12, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build...Show more
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build 39938, Acronis True Image OEM (Windows) before build 42575.Show less
CVE-2023-45248
1Acronis
1Agent
Jun 17, 2026
Oct 9, 2023
N/A· v4
7.3 HIGH· v3
N/A· v2
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36497, Acronis Cyber Protect 16 (Windows) before build 37391.
CVE-2023-45247
1Acronis
1Agent
Jun 17, 2026
Oct 9, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36497, Acronis Cyber Protect 16...Show more
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36497, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169.Show less
CVE-2023-45246
1Acronis
1Agent
Jun 17, 2026
Oct 6, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343, Acronis Cyber Protect 16...Show more
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169.Show less
CVE-2023-45245
1Acronis
1Agent
Jun 17, 2026
Oct 6, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 36119.
CVE-2023-45244
1Acronis
1Agent
Jun 17, 2026
Oct 6, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895, Acronis Cyber Protect 16...Show more
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 37391.Show less