Vulnerability Details CVE-2023-2360
Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.2.0-135.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.3%
CVSS Severity
CVSS v3 Score 3.1
Products affected by CVE-2023-2360
-
cpe:2.3:a:acronis:cyber_infrastructure:-
-
cpe:2.3:a:acronis:cyber_infrastructure:3.0.0-1906
-
cpe:2.3:a:acronis:cyber_infrastructure:3.0.1-54
-
cpe:2.3:a:acronis:cyber_infrastructure:3.0.1-59
-
cpe:2.3:a:acronis:cyber_infrastructure:3.0.2-46
-
cpe:2.3:a:acronis:cyber_infrastructure:3.0.3-16
-
cpe:2.3:a:acronis:cyber_infrastructure:3.0.3-27
-
cpe:2.3:a:acronis:cyber_infrastructure:3.0.4-63
-
cpe:2.3:a:acronis:cyber_infrastructure:3.0.5-63
-
cpe:2.3:a:acronis:cyber_infrastructure:3.0.5-64
-
cpe:2.3:a:acronis:cyber_infrastructure:3.0.5-69
-
cpe:2.3:a:acronis:cyber_infrastructure:3.0.5-72
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.0-812
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.1-43
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.1-45
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.1-48
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.1-51
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.2-34
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.2-35
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.2-39
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.3-18
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.3-22
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.3-25
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.4-24
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.4-26
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.4-28
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.5-25
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.5-41
-
cpe:2.3:a:acronis:cyber_infrastructure:3.5.5-47
-
cpe:2.3:a:acronis:cyber_infrastructure:4.0.0-734
-
cpe:2.3:a:acronis:cyber_infrastructure:4.0.0-737
-
cpe:2.3:a:acronis:cyber_infrastructure:4.0.0-741
-
cpe:2.3:a:acronis:cyber_infrastructure:4.0.1-44
-
cpe:2.3:a:acronis:cyber_infrastructure:4.0.1-48
-
cpe:2.3:a:acronis:cyber_infrastructure:4.0.1-49
-
cpe:2.3:a:acronis:cyber_infrastructure:4.0.1-52
-
cpe:2.3:a:acronis:cyber_infrastructure:4.0.1-55
-
cpe:2.3:a:acronis:cyber_infrastructure:4.0.1-57
-
cpe:2.3:a:acronis:cyber_infrastructure:4.5.0-284
-
cpe:2.3:a:acronis:cyber_infrastructure:4.5.0-289
-
cpe:2.3:a:acronis:cyber_infrastructure:4.5.1-23
-
cpe:2.3:a:acronis:cyber_infrastructure:4.5.1-31
-
cpe:2.3:a:acronis:cyber_infrastructure:4.5.1-42
-
cpe:2.3:a:acronis:cyber_infrastructure:4.5.2-10
-
cpe:2.3:a:acronis:cyber_infrastructure:4.6.0-208
-
cpe:2.3:a:acronis:cyber_infrastructure:4.6.0-209
-
cpe:2.3:a:acronis:cyber_infrastructure:4.6.0-213
-
cpe:2.3:a:acronis:cyber_infrastructure:4.6.1-42
-
cpe:2.3:a:acronis:cyber_infrastructure:4.6.2-10
-
cpe:2.3:a:acronis:cyber_infrastructure:4.6.2-22
-
cpe:2.3:a:acronis:cyber_infrastructure:4.7.0-230
-
cpe:2.3:a:acronis:cyber_infrastructure:4.7.0-234
-
cpe:2.3:a:acronis:cyber_infrastructure:4.7.0-237
-
cpe:2.3:a:acronis:cyber_infrastructure:4.7.1-29
-
cpe:2.3:a:acronis:cyber_infrastructure:4.7.1-35
-
cpe:2.3:a:acronis:cyber_infrastructure:4.7.1-36
-
cpe:2.3:a:acronis:cyber_infrastructure:4.7.1-50
-
cpe:2.3:a:acronis:cyber_infrastructure:4.7.1-53
-
cpe:2.3:a:acronis:cyber_infrastructure:5.0.0-137
-
cpe:2.3:a:acronis:cyber_infrastructure:5.0.0-140
-
cpe:2.3:a:acronis:cyber_infrastructure:5.0.1-42
-
cpe:2.3:a:acronis:cyber_infrastructure:5.0.1-53
-
cpe:2.3:a:acronis:cyber_infrastructure:5.0.1-55
-
cpe:2.3:a:acronis:cyber_infrastructure:5.0.1-57
-
cpe:2.3:a:acronis:cyber_infrastructure:5.0.1-61
-
cpe:2.3:a:acronis:cyber_infrastructure:5.1.0-206
-
cpe:2.3:a:acronis:cyber_infrastructure:5.1.1
-
cpe:2.3:a:acronis:cyber_infrastructure:5.1.1-61
-
cpe:2.3:a:acronis:cyber_infrastructure:5.1.1-68
-
cpe:2.3:a:acronis:cyber_infrastructure:5.1.1-71
-
cpe:2.3:a:acronis:cyber_infrastructure:5.2.0