CVE-2023-48679

MEDIUM 5.4CVE-2023-48679 · Published 27/02/2024 · updated 17/06/2026

In short

CVE-2023-48679 is a MEDIUM (CVSS 5.4) vulnerability affecting cyber protect (acronis).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 17.7% of all vulnerabilities.
Fix: update to 16 or later.

Package	Affected versions	Patched versions
cyber protect acronis	`< 16`	`16`

Description

Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.

References

security-advisory.acronis.com/advisories/SEC-3469 · Vendor Advisory

More vulnerabilities in cyber protect

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cyber protect

acronis

< 16

16

More vulnerabilities in cyber protect

See all →