PT-2022-20439 · Acronis · Acronis Cyber Protect 15+1

Netero1010 · Published 2022-05-18 · Updated 2023-06-29 · CVE-2022-30991

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 15 versions before build 29240

Description The issue is related to HTML injection via report name.

Recommendations For Acronis Cyber Protect 15 versions before build 29240, update to a version after build 29240 to resolve the issue.

Fix

Special Elements Injection

XSS

Weakness Enumeration

CWE-74

CWE-79

Related Identifiers

CVE-2022-30991

Affected Products

Acronis

Acronis Cyber Protect 15

References · 6

• https://osv.dev/vulnerability/CVE-2022-30991 · Vendor Advisory
• https://security-advisory.acronis.com/advisories/SEC-3928 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30991 · Security Note
• https://t.me/cibsecurity/42961 · Telegram Post
• https://t.me/cvenotify/30406 · Telegram Post
• https://t.me/cvenotify/30416 · Telegram Post