# CVSS v3.0: High Availability Impact CVEs with a high availability impact (CVSS v3.0). Source: https://docs.deepinfo.com/reference/vulnerability/search/examples/metrics-cvss-metric-v30-cvss-data-availability-impact/ Last updated: 2026-09-26 --- `POST https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25` CVEs with a high availability impact (CVSS v3.0). Example 12 of 16 in **Filters › CVSS v3.0** · [Vulnerability Search Examples](/reference/vulnerability/search/examples/) · endpoint: [Search](/reference/vulnerability/search/) Tags: `field` `metrics.cvss_metric_v30.cvss_data.availability_impact` · `operator` `eq` `metrics.cvss_metric_v30.cvss_data.availability_impact` is the impact on availability, in the CVSS v3.0 metric (`metrics.cvss_metric_v30`, one entry per scoring source). `eq` matches the exact value `HIGH`. In the response, look at `results[].metrics.cvss_metric_v30[].cvss_data.availability_impact`. ## Request | Parameter | In | Value | |---|---|---| | `page_size` | query | `25` | | `filters.must[0].name` | body | `metrics.cvss_metric_v30.cvss_data.availability_impact` | | `filters.must[0].type` | body | `eq` | | `filters.must[0].value` | body | `HIGH` | ```bash curl -X POST 'https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25' \ -H 'apikey: YOUR_API_KEY' \ -H 'Accept: application/json' \ -H 'Content-Type: application/json' \ -d '{ "filters": { "must": [ { "name": "metrics.cvss_metric_v30.cvss_data.availability_impact", "type": "eq", "value": "HIGH" } ] } }' ``` ## Response ### 200 · OK > Shortened for this page: results: 3 of 25 shown; results[].enrichment.cwe[].capec_id: first 10 items; results[].configurations[].nodes[].cpe_match: first 10 items; results[].enrichment.cpe: first 10 items `Content-Type: application/json` · `ratelimit-limit: 1` · `ratelimit-remaining: 0` · `ratelimit-reset: 1` · `x-ratelimit-limit-second: 1` · `x-ratelimit-remaining-second: 0` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a` ```json { "page": 1, "page_size": 25, "result_count": 31660, "results": [ { "id": "CVE-2026-0848", "source_identifier": "user@huntr.dev", "published": "2026-03-05T21:16:14Z", "last_modified": "2026-06-17T10:11:29Z", "status": "Analyzed", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of arbitrary Java bytecode at import time. This vulnerability can be exploited through methods such as model poisoning, MITM attacks, or dependency poisoning, leading to remote code execution. The issue arises from the direct execution of the JAR file via subprocess with unvalidated classpath input, allowing malicious classes to execute when loaded by the JVM." }, { "lang": "es", "value": "Las versiones de NLTK <=3.9.2 son vulnerables a ejecución de código arbitrario debido a una validación de entrada inadecuada en el módulo StanfordSegmenter. El módulo carga dinámicamente archivos .jar de Java externos sin verificación ni sandboxing. Un atacante puede suministrar o reemplazar el archivo JAR, permitiendo la ejecución de bytecode Java arbitrario en el momento de la importación. Esta vulnerabilidad puede ser explotada a través de métodos como el envenenamiento de modelos, ataques MitM o el envenenamiento de dependencias, lo que lleva a ejecución remota de código. El problema surge de la ejecución directa del archivo JAR a través de un subproceso con entrada de classpath no validada, permitiendo que clases maliciosas se ejecuten cuando son cargadas por la JVM." } ], "references": [ { "url": "https://huntr.com/bounties/08b109bb-ac24-403f-9422-1c246ce60202", "source": "user@huntr.dev", "tags": [ "Exploit", "Vendor Advisory" ] }, { "url": "https://huntr.com/bounties/08b109bb-ac24-403f-9422-1c246ce60202", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": [ "Exploit", "Vendor Advisory" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": null, "cvss_metric_v30": [ { "source": "user@huntr.dev", "type": "Secondary", "cvss_data": { "version": "3.0", "vector_string": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "privileges_required": "NONE", "user_interaction": "NONE", "scope": "CHANGED", "confidentiality_impact": "HIGH", "integrity_impact": "HIGH", "availability_impact": "HIGH", "base_score": 10.0, "base_severity": "CRITICAL", "exploit_code_maturity": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "temporal_severity": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_scope": null, "modified_confidentiality_impact": null, "modified_integrity_impact": null, "modified_availability_impact": null, "environmental_score": null, "environmental_severity": null }, "exploitability_score": 3.9, "impact_score": 6.0 } ], "cvss_metric_v2": null }, "weaknesses": [ { "source": "user@huntr.dev", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-20" } ] }, { "source": "user@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ] } ], "configurations": [ { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:a:nltk:nltk:*:*:*:*:*:*:*:*", "match_criteria_id": "D07FBCBF-3A88-4B1B-AF47-76DF3B7B13B6", "version_start_including": null, "version_start_excluding": null, "version_end_including": "3.9.2", "version_end_excluding": null } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:a:nltk:nltk:*:*:*:*:*:*:*:*", "vendor": "nltk", "product": "nltk", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": "3.9.2", "version_end_excluding": null, "affected_versions_first": "2.0.1", "affected_versions_last": "3.9.2" } ], "cwe": [ { "id": 20, "owasptop10_2021": "A03 Injection", "name": "Improper Input Validation", "description": "The product receives input or data, but it does\n not validate or incorrectly validates that the input has the\n properties that are required to process the data safely and\n correctly.", "capec_id": [ 3, 7, 8, 9, 10, 13, 14, 22, 23, 24 ], "scope": [ "Availability", "Confidentiality", "Integrity" ], "impact": [ "DoS: Crash, Exit, or Restart", "DoS: Resource Consumption (CPU)", "DoS: Resource Consumption (Memory)", "Execute Unauthorized Code or Commands", "Modify Memory", "Read Files or Directories", "Read Memory" ], "detection_method": [ "Architecture or Design Review", "Automated Static Analysis", "Automated Static Analysis - Binary or Bytecode", "Automated Static Analysis - Source Code", "Dynamic Analysis with Automated Results Interpretation", "Dynamic Analysis with Manual Results Interpretation", "Fuzzing", "Manual Static Analysis", "Manual Static Analysis - Binary or Bytecode", "Manual Static Analysis - Source Code" ] } ], "epss_score": { "epss": 0.00809, "percentile": 0.55407, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "3.0" ], "source": "user@huntr.dev", "type": "Secondary", "cvss_data": { "version": "3.0", "vector_string": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": null, "privileges_required": "NONE", "user_interaction": "NONE", "vulnerable_system_confidentiality": "HIGH", "vulnerable_system_integrity": "HIGH", "vulnerable_system_availability": "HIGH", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 10.0, "base_severity": "CRITICAL" } } } }, { "id": "CVE-2025-30416", "source_identifier": "user@acronis.com", "published": "2026-02-20T01:15:59Z", "last_modified": "2026-06-17T09:08:41Z", "status": "Analyzed", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800." }, { "lang": "es", "value": "Divulgación y manipulación de datos sensibles debido a la falta de autorización. Los siguientes productos están afectados: Acronis Cyber Protect 16 (Linux, Windows) anterior a la compilación 39938, Acronis Cyber Protect 15 (Linux, Windows) anterior a la compilación 41800." } ], "references": [ { "url": "https://security-advisory.acronis.com/advisories/SEC-8766", "source": "user@acronis.com", "tags": [ "Vendor Advisory" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": null, "cvss_metric_v30": [ { "source": "user@acronis.com", "type": "Secondary", "cvss_data": { "version": "3.0", "vector_string": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "privileges_required": "NONE", "user_interaction": "NONE", "scope": "CHANGED", "confidentiality_impact": "HIGH", "integrity_impact": "HIGH", "availability_impact": "HIGH", "base_score": 10.0, "base_severity": "CRITICAL", "exploit_code_maturity": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "temporal_severity": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_scope": null, "modified_confidentiality_impact": null, "modified_integrity_impact": null, "modified_availability_impact": null, "environmental_score": null, "environmental_severity": null }, "exploitability_score": 3.9, "impact_score": 6.0 } ], "cvss_metric_v2": null }, "weaknesses": [ { "source": "user@acronis.com", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-862" } ] } ], "configurations": [ { "operator": "AND", "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*", "match_criteria_id": "89899D10-1343-4276-919A-9C1DF2DB8B55", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:*", "match_criteria_id": "A77B2499-B3A4-4278-BA0D-59AB59C60352", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:*", "match_criteria_id": "BAF6A576-C320-4550-B7F8-4FCAE82FB06A", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:*:*:*", "match_criteria_id": "9740A956-D589-4846-8717-B6182EB65F8B", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update4:*:*:*:*:*:*", "match_criteria_id": "9AB8B19B-2B40-4F1B-AE24-1C43D362E4BC", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update5:*:*:*:*:*:*", "match_criteria_id": "69506F27-DEF8-4317-9E54-D79CA430AD4B", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update6:*:*:*:*:*:*", "match_criteria_id": "7612ED8E-16CE-40CD-8004-94EC27DB286E", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:16:-:*:*:*:*:*:*", "match_criteria_id": "9151E39F-20EA-4A01-9E1A-4A951BEABA5E", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:16:update1:*:*:*:*:*:*", "match_criteria_id": "6F99AD89-6646-4C55-87CD-D20B40D25808", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:16:update2:*:*:*:*:*:*", "match_criteria_id": "FEA4EC9E-1766-499B-8B93-6A23F17C4D75", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] }, { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": false, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "match_criteria_id": "155AD4FB-E527-4103-BCEF-801B653DEA37", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": false, "criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "match_criteria_id": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update4:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update5:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update6:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:16:-:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "16", "affected_versions_last": "16" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:16:update1:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "16", "affected_versions_last": "16" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:16:update2:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "16", "affected_versions_last": "16" } ], "cwe": [ { "id": 862, "owasptop10_2021": "A01 Broken Access Control", "name": "Missing Authorization", "description": "The product does not perform an authorization check when an actor attempts to access a resource or perform an action.", "capec_id": [ 665 ], "scope": [ "Access Control", "Availability", "Confidentiality", "Integrity" ], "impact": [ "Bypass Protection Mechanism", "DoS: Crash, Exit, or Restart", "DoS: Resource Consumption (CPU)", "DoS: Resource Consumption (Memory)", "DoS: Resource Consumption (Other)", "Gain Privileges or Assume Identity", "Modify Application Data", "Modify Files or Directories", "Read Application Data", "Read Files or Directories" ], "detection_method": [ "Architecture or Design Review", "Automated Dynamic Analysis", "Automated Static Analysis", "Automated Static Analysis - Source Code", "Dynamic Analysis with Automated Results Interpretation", "Dynamic Analysis with Manual Results Interpretation", "Manual Analysis", "Manual Static Analysis - Binary or Bytecode", "Manual Static Analysis - Source Code" ] } ], "epss_score": { "epss": 0.00465, "percentile": 0.39522, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "3.0" ], "source": "user@acronis.com", "type": "Secondary", "cvss_data": { "version": "3.0", "vector_string": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": null, "privileges_required": "NONE", "user_interaction": "NONE", "vulnerable_system_confidentiality": "HIGH", "vulnerable_system_integrity": "HIGH", "vulnerable_system_availability": "HIGH", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 10.0, "base_severity": "CRITICAL" } } } }, { "id": "CVE-2025-30412", "source_identifier": "user@acronis.com", "published": "2026-02-20T01:15:59Z", "last_modified": "2026-06-17T09:08:40Z", "status": "Analyzed", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800." }, { "lang": "es", "value": "Divulgación y manipulación de datos sensibles debido a autenticación incorrecta. Los siguientes productos se ven afectados: Acronis Cyber Protect 16 (Linux, Windows) antes de la compilación 39938, Acronis Cyber Protect 15 (Linux, Windows) antes de la compilación 41800." } ], "references": [ { "url": "https://security-advisory.acronis.com/advisories/SEC-8598", "source": "user@acronis.com", "tags": [ "Vendor Advisory" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": null, "cvss_metric_v30": [ { "source": "user@acronis.com", "type": "Secondary", "cvss_data": { "version": "3.0", "vector_string": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "privileges_required": "NONE", "user_interaction": "NONE", "scope": "CHANGED", "confidentiality_impact": "HIGH", "integrity_impact": "HIGH", "availability_impact": "HIGH", "base_score": 10.0, "base_severity": "CRITICAL", "exploit_code_maturity": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "temporal_severity": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_scope": null, "modified_confidentiality_impact": null, "modified_integrity_impact": null, "modified_availability_impact": null, "environmental_score": null, "environmental_severity": null }, "exploitability_score": 3.9, "impact_score": 6.0 } ], "cvss_metric_v2": null }, "weaknesses": [ { "source": "user@acronis.com", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-1390" } ] } ], "configurations": [ { "operator": "AND", "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*", "match_criteria_id": "89899D10-1343-4276-919A-9C1DF2DB8B55", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:*", "match_criteria_id": "A77B2499-B3A4-4278-BA0D-59AB59C60352", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:*", "match_criteria_id": "BAF6A576-C320-4550-B7F8-4FCAE82FB06A", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:*:*:*", "match_criteria_id": "9740A956-D589-4846-8717-B6182EB65F8B", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update4:*:*:*:*:*:*", "match_criteria_id": "9AB8B19B-2B40-4F1B-AE24-1C43D362E4BC", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update5:*:*:*:*:*:*", "match_criteria_id": "69506F27-DEF8-4317-9E54-D79CA430AD4B", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update6:*:*:*:*:*:*", "match_criteria_id": "7612ED8E-16CE-40CD-8004-94EC27DB286E", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:16:-:*:*:*:*:*:*", "match_criteria_id": "9151E39F-20EA-4A01-9E1A-4A951BEABA5E", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:16:update1:*:*:*:*:*:*", "match_criteria_id": "6F99AD89-6646-4C55-87CD-D20B40D25808", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:acronis:cyber_protect:16:update2:*:*:*:*:*:*", "match_criteria_id": "FEA4EC9E-1766-499B-8B93-6A23F17C4D75", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] }, { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": false, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "match_criteria_id": "155AD4FB-E527-4103-BCEF-801B653DEA37", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": false, "criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "match_criteria_id": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update4:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update5:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update6:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "15", "affected_versions_last": "15" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:16:-:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "16", "affected_versions_last": "16" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:16:update1:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "16", "affected_versions_last": "16" }, { "criteria": "cpe:2.3:a:acronis:cyber_protect:16:update2:*:*:*:*:*:*", "vendor": "acronis", "product": "cyber_protect", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "16", "affected_versions_last": "16" } ], "cwe": [ { "id": 1390, "owasptop10_2021": null, "name": "Weak Authentication", "description": "The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.", "capec_id": null, "scope": [ "Access Control", "Availability", "Confidentiality", "Integrity" ], "impact": [ "Execute Unauthorized Code or Commands", "Gain Privileges or Assume Identity", "Read Application Data" ], "detection_method": null } ], "epss_score": { "epss": 0.0071, "percentile": 0.52121, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "3.0" ], "source": "user@acronis.com", "type": "Secondary", "cvss_data": { "version": "3.0", "vector_string": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": null, "privileges_required": "NONE", "user_interaction": "NONE", "vulnerable_system_confidentiality": "HIGH", "vulnerable_system_integrity": "HIGH", "vulnerable_system_availability": "HIGH", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 10.0, "base_severity": "CRITICAL" } } } } ] } ``` ## Related Examples - [CVSS v3.0: No Integrity Impact](/reference/vulnerability/search/examples/metrics-cvss-metric-v30-cvss-data-integrity-impact/) - [CVSS v3.0: Low Confidentiality Impact](/reference/vulnerability/search/examples/metrics-cvss-metric-v30-cvss-data-confidentiality-impact/) - [CVSS v3.0: Medium Severity](/reference/vulnerability/search/examples/metrics-cvss-metric-v30-cvss-data-base-severity/) - [CVSS v3.0: Changed Scope](/reference/vulnerability/search/examples/metrics-cvss-metric-v30-cvss-data-scope/) - [CVSS v3.0: Highest Exploitability Score](/reference/vulnerability/search/examples/metrics-cvss-metric-v30-exploitability-score/) - [CVSS v3.0: User Interaction Required](/reference/vulnerability/search/examples/metrics-cvss-metric-v30-cvss-data-user-interaction/)