Skip to main content

Cyber Protect CVE-2022-30991

MEDIUM
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)
2022-05-18 security@acronis.com
Microsoft Code Injection Cyber Protect
6.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.1 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
May 18, 2022 - 20:15 nvd
MEDIUM 6.1

DescriptionNVD

HTML injection via report name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240

AnalysisAI

HTML injection via report name. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-74. HTML injection via report name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240 Affected products include: Acronis Cyber Protect.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Cyber Protect

View all
CVE-2025-30412 CRITICAL
10.0 Feb 20

Second improper authentication in Acronis Cyber Protect 16. CVSS 10.0.
CVE-2025-30411 CRITICAL
10.0 Feb 20

Improper authentication in Acronis Cyber Protect 16. CVSS 10.0.
CVE-2025-30416 CRITICAL
10.0 Feb 20

Missing authorization in Acronis Cyber Protect 16 allows sensitive data access. CVSS 10.0.
CVE-2026-28710 CRITICAL
9.8 Mar 06

Improper authentication in Acronis Cyber Protect 17.
CVE-2024-49388 CRITICAL
9.1 Oct 15

Sensitive information manipulation due to improper authorization. Rated critical severity (CVSS 9.1), this vulnerability
CVE-2023-44206 CRITICAL
9.1 Sep 27

Sensitive information disclosure and manipulation due to improper authorization. Rated critical severity (CVSS 9.1), thi
CVE-2023-44152 CRITICAL
9.1 Sep 27

Sensitive information disclosure and manipulation due to improper authentication. Rated critical severity (CVSS 9.1), th
CVE-2023-44154 HIGH
8.1 Sep 27

Sensitive information disclosure and manipulation due to improper authorization. Rated high severity (CVSS 8.1), this vu
CVE-2023-41743 HIGH
7.8 Aug 31

Local privilege escalation due to insecure driver communication port permissions. Rated high severity (CVSS 7.8), this v
CVE-2023-44157 HIGH
7.8 Sep 27

Local privilege escalation due to insecure folder permissions. Rated high severity (CVSS 7.8), this vulnerability is low
CVE-2023-41744 HIGH
7.8 Aug 31

Local privilege escalation due to unrestricted loading of unsigned libraries. Rated high severity (CVSS 7.8), this vulne
CVE-2021-44198 HIGH
7.8 Nov 29

DLL hijacking could lead to local privilege escalation. Rated high severity (CVSS 7.8), this vulnerability is no authent

Same weakness CWE-74 – Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2016-4010 CRITICAL POC
9.8
CVE-2015-1592 HIGH POC
7.5
CVE-2025-20281 CRITICAL POC
10.0
CVE-2015-7309 MEDIUM POC
6.5
CVE-2014-8423 CRITICAL POC
10.0
CVE-2020-8468 HIGH POC
8.8
CVE-2015-3253 CRITICAL
9.8

Same technique Code Injection

View all
CVE-2012-0158 HIGH POC
8.8
CVE-2014-6287 CRITICAL POC
9.8
CVE-2017-7494 CRITICAL POC
9.8
CVE-2025-24893 CRITICAL POC
9.8
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-3906 HIGH POC
7.8
CVE-2017-9822 HIGH POC
8.8
CVE-2018-1273 CRITICAL POC
9.8

Share

CVE-2022-30991 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy