CVE-2024-55541

Medium CVSS: 6.1

Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39169.

Vendor

Acronis

Product

Cyber Protect

CWE

CWE-79

Yayın Tarihi

2025-01-02 16:15:07

Güncelleme

2025-03-06 16:46:30

Source Identifier

security@acronis.com

KEV Date Added

Kategoriler

CWE-79 Cyber Protect MEDIUM Acronis 2025

Referanslar

https://security-advisory.acronis.com/advisories/SEC-3647

Benzer Kayıtlar

High

CVE-2026-28721

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec…

High

CVE-2026-28722

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec…

Medium

CVE-2026-28723

Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Prot…

Medium

CVE-2026-28724

Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyb…

Medium

CVE-2026-28725

Sensitive information disclosure due to improper configuration of a headless browser. The following products are affecte…

Medium

CVE-2026-28726

Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Prot…