Known vulnerabilities in Cyber Protect

Vendor: Acronis
Software: Cyber Protect
Software CPE: cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*
Website: https://www.acronis.com/
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cyber Protect Cyber Protect is affected by 13 known vulnerabilities: 1 high, 2 medium, 10 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153064 - Missing Authorization
CVE-2025-30416		 CWE-862 High
No
No
 15 Update 7, 16 Update 4 01.10.2026 SB2026100131
#VU153062 - Inadequate Encryption Strength
CVE-2025-48960		 CWE-326 Medium
No
No
 16 Update 4 01.10.2026 SB2026100131
#VU153061 - Server-Side Request Forgery (SSRF)
CVE-2025-48962		 CWE-918 Medium
No
No
 16 Update 4 01.10.2026 SB2026100131
#VU63499 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30990		 CWE-200 Low
No
No
 15 29240 20.05.2022 SB2022052021
#VU63498 - Cleartext Transmission of Sensitive Information
CVE-2022-30994		 CWE-319 Low
No
No
 15 29240 20.05.2022 SB2022052021
#VU63497 - Cleartext Transmission of Sensitive Information
CVE-2022-30993		 CWE-319 Low
No
No
 15 29240 20.05.2022 SB2022052021
#VU63495 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-30992		 CWE-601 Low
No
No
 15 29240 20.05.2022 SB2022052021
#VU63494 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-30991		 CWE-79 Low
No
No
 15 29240 20.05.2022 SB2022052021
#VU58492 - Uncontrolled Search Path Element
CVE-2021-44198		 CWE-427 Low
No
No
 15 28035 02.12.2021 SB2021120210
#VU58491 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-44203		 CWE-79 Low
No
No
 15 28035 02.12.2021 SB2021120210
#VU58490 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-44202		 CWE-79 Low
No
No
 15 28035 02.12.2021 SB2021120210
#VU58489 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-44201		 CWE-79 Low
No
No
 15 28035 02.12.2021 SB2021120210
#VU58488 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-44200		 CWE-79 Low
No
No
 15 28035 02.12.2021 SB2021120210