AC
Product
Acronis Cyber Protect 16
21
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 4Medium 11Low 1
Watch
Add Acronis Cyber Protect 16 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30416 | 10.0 | Feb 20 | Sensitive data disclosure and manipulation due to missing authorization Affected: before 39938 |
| CVE-2025-30412 | 10.0 | Feb 20 | Sensitive data disclosure and manipulation due to improper authentication Affected: before 39938 |
| CVE-2025-30411 | 10.0 | Feb 20 | Sensitive data disclosure and manipulation due to improper authentication Affected: before 39938 |
| CVE-2025-30410 | 9.8 | Feb 20 | Sensitive data disclosure and manipulation due to missing authentication Affected: before 39938 |
| CVE-2024-49388 | 9.1 | Oct 15 | Sensitive information manipulation due to improper authorization Affected: before 38690 |
| CVE-2024-55540 | 7.8 | Jan 2 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 39169 |
| CVE-2024-55543 | 7.8 | Jan 2 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 39169 |
| CVE-2024-49387 | 7.5 | Oct 15 | Cleartext transmission of sensitive information in acep-collector service Affected: before 38690 |
| CVE-2025-48961 | 7.3 | Jun 4 | Local privilege escalation due to insecure folder permissions Affected: before 39938 |
| CVE-2025-30408 | 6.7 | Apr 24 | Local privilege escalation due to insecure folder permissions Affected: before 39938 |
| CVE-2024-8766 | 6.7 | Sep 16 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 39169 |
| CVE-2024-55541 | 6.1 | Jan 2 | Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage Affected: before 39169 |
| CVE-2024-56413 | 6.1 | Jan 2 | Missing session invalidation after user deletion Affected: before 39169 |
| CVE-2025-48960 | 5.9 | Jun 4 | Weak server key used for TLS encryption Affected: before 39938 |
| CVE-2024-56414 | 5.5 | Jan 2 | Web installer integrity check used weak hash algorithm Affected: before 39169 |
| CVE-2024-55542 | 4.4 | Jan 2 | Local privilege escalation due to excessive permissions assigned to Tray Monitor service Affected: before 39169 |
| CVE-2025-48962 | 4.3 | Jun 4 | Sensitive information disclosure due to SSRF Affected: before 39938 |
| CVE-2024-49384 | 4.3 | Oct 15 | Excessive attack surface in acep-collector service due to binding to an unrestricted IP address Affected: before 38690 |
| CVE-2024-49383 | 4.3 | Oct 15 | Excessive attack surface in acep-importer service due to binding to an unrestricted IP address Affected: before 38690 |
| CVE-2024-49382 | 4.3 | Oct 15 | Excessive attack surface in archive-server service due to binding to an unrestricted IP address Affected: before 38690 |
| CVE-2024-55539 | 2.5 | Dec 23 | Weak algorithm used to sign RPM package Affected: before 39938 |
Showing 21