AC
Product
Acronis Cyber Protect 16
36
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 12Medium 18Low 1
Watch
Add Acronis Cyber Protect 16 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30408 | 6.7 | Apr 24 | Local privilege escalation due to insecure folder permissions Affected: before 39938 |
| CVE-2024-8766 | 6.7 | Sep 16 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 39169 |
| CVE-2024-55541 | 6.1 | Jan 2 | Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage Affected: before 39169 |
| CVE-2024-56413 | 6.1 | Jan 2 | Missing session invalidation after user deletion Affected: before 39169 |
| CVE-2023-48681 | 6.1 | Feb 27 | Self cross-site scripting (XSS) vulnerability in storage nodes search field Affected: before 37391 |
| CVE-2025-48960 | 5.9 | Jun 4 | Weak server key used for TLS encryption Affected: before 39938 |
| CVE-2024-56414 | 5.5 | Jan 2 | Web installer integrity check used weak hash algorithm Affected: before 39169 |
| CVE-2023-48680 | 5.5 | Feb 27 | Sensitive information disclosure due to excessive collection of system information Affected: before 37391 |
| CVE-2023-48678 | 5.5 | Feb 27 | Sensitive information disclosure due to insecure folder permissions Affected: before 37391 |
| CVE-2023-45241 | 5.5 | Oct 5 | Sensitive information leak through log files Affected: before 37391 |
| CVE-2023-44213 | 5.5 | Oct 5 | Sensitive information disclosure due to excessive collection of system information Affected: before 37391 |
| CVE-2023-48682 | 5.4 | Feb 27 | Stored cross-site scripting (XSS) vulnerability in unit name Affected: before 37391 |
| CVE-2023-48679 | 5.4 | Feb 27 | Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage Affected: before 37391 |
| CVE-2024-55542 | 4.4 | Jan 2 | Local privilege escalation due to excessive permissions assigned to Tray Monitor service Affected: before 39169 |
| CVE-2025-48962 | 4.3 | Jun 4 | Sensitive information disclosure due to SSRF Affected: before 39938 |
| CVE-2024-49384 | 4.3 | Oct 15 | Excessive attack surface in acep-collector service due to binding to an unrestricted IP address Affected: before 38690 |
| CVE-2024-49383 | 4.3 | Oct 15 | Excessive attack surface in acep-importer service due to binding to an unrestricted IP address Affected: before 38690 |
| CVE-2024-49382 | 4.3 | Oct 15 | Excessive attack surface in archive-server service due to binding to an unrestricted IP address Affected: before 38690 |
Showing 18