CVE-2022-30991

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

HTML injection via report name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-74CWE-79

Affected software

VendorProductVersions
AcronisAcronis Cyber Protect 15>= unspecified, < 29240
AcronisAcronis Cyber Protect 15>= unspecified, < 29240

References

Timeline

Published
May 18, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-309926.1Open redirect via user-controlled query parameter. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before buiCVE-2022-309937.5Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before buildCVE-2022-309947.5Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 29240CVE-2022-309957.5Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Windows, LinCVE-2022-309977.2Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which may allow an attacker CVE-2022-309988.8Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in WooPlugins.co's Homepage Product Organizer fCVE-2022-309995.4FriendsofFlarum (FoF) Upload is an extension that handles file uploads intelligently for your forum. If FoF Upload prior to version 1.2.3 isCVE-2022-31005.9A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.CVE-2022-310004.3solidus_backend is the admin interface for the Solidus e-commerce framework. Versions prior to 3.1.6, 3.0.6, and 2.11.16 contain a cross-sitCVE-2022-310017.5Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message wiCVE-2022-310027.5Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message wiCVE-2022-310039.8Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp m
CVE-2022-30991: Medium severity, CVSS 6.1 | Vulnix