Synology

Active Backup For Business Agent

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.6

CVE-2025-66592

  • EPSS 0.09%
  • Veröffentlicht 27.05.2026 08:43:05
  • Zuletzt bearbeitet 02.06.2026 16:08:58

An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation.

6.5

CVE-2024-47265

  • EPSS 0.37%
  • Veröffentlicht 13.02.2025 07:15:10
  • Zuletzt bearbeitet 26.02.2026 21:17:10

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in encrypted share umount functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated use...

2.7

CVE-2024-47266

  • EPSS 0.44%
  • Veröffentlicht 13.02.2025 07:15:10
  • Zuletzt bearbeitet 26.02.2026 21:17:04

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in share file list functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users with...

6.5

CVE-2024-47264

  • EPSS 0.53%
  • Veröffentlicht 13.02.2025 07:15:09
  • Zuletzt bearbeitet 26.02.2026 23:11:46

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in agent-related functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users with a...

3.3

CVE-2023-52947

  • EPSS 0.16%
  • Veröffentlicht 26.09.2024 04:15:06
  • Zuletzt bearbeitet 02.10.2024 15:26:28

Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecified vectors. The backup functionality will continue ...

5

CVE-2023-52948

  • EPSS 0.09%
  • Veröffentlicht 26.09.2024 04:15:06
  • Zuletzt bearbeitet 02.10.2024 15:26:30

Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.

5.5

CVE-2023-52949

  • EPSS 0.18%
  • Veröffentlicht 26.09.2024 04:15:06
  • Zuletzt bearbeitet 02.10.2024 15:26:32

Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.

5.3

CVE-2023-52950

  • EPSS 0.08%
  • Veröffentlicht 26.09.2024 04:15:06
  • Zuletzt bearbeitet 02.10.2024 15:26:33

Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credential via unspecified vectors.