Skip to content
BackEsc
Sign in

Acronis · disclosed reports

Cross-site Scripting

31 disclosed reports · $1,850 paid

Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne. The status is HackerOne's own outcome; "access needed" is only what a title states.

Open Acronis on HackerOne
reports
31
valid
0
paid a bounty
13

Every one of the 31 is a mark on the map. Named now: 1 to 26, most upvoted first.

  1. [oem.acronis.com] Reflected Cross Site Scripting#2038943Acronis · $100 · 134 votes
  2. Stored XSS in backup scanning plan name#961046Acronis · $500 · 120 votes
  3. Flash Based Reflected XSS on www.grouplogic.com/jwplayer/player.swf#859806Acronis · 89 votes
  4. Reflected XSS on http://www.grouplogic.com/files/glidownload/verify.asp#859395Acronis · 84 votes
  5. Potential XSS Vulnerability in Acronis Login Callback URL#2611305Acronis · 82 votes
  6. XSS on https://partners.acronis.com/#979204Acronis · 73 votes
  7. Reflected XSS in https://www.acronis.com/products/cyber-protect/trial/#1891926Acronis · $100 · 72 votes
  8. Reflected XSS on www.grouplogic.com/video.asp#859802Acronis · 67 votes
  9. Stored Cross-site Scripting on devicelock.com/forum/#1122513Acronis · 65 votes
  10. Blind XSS on admin.acronis.com via delete account form on account.acronis.com#666040Acronis · 65 votes
  11. Potential XSS in redirect_url Parameter#2653342Acronis · 64 votes
  12. Stored XSS in Acronis Cyber Protect Console#1064095Acronis · $500 · 63 votes
  13. Stored XSS in profile page#1084183Acronis · $50 · 45 votes
  14. Reflected XSS via "Error" parameter on https://admin.acronis.com/admin/su/#970878Acronis · $50 · 39 votes
  15. CSS Injection via Client Side Path Traversal + Open Redirect leads to personal data exfiltration on Acronis Cloud#1245165Acronis · 37 votes
  16. Self XSS on Acronis Cyber Cloud#957229Acronis · $100 · 37 votes
  17. Reflected XSS on www.acronis.com/de-de/my/subscriptions/index.html#1145712Acronis · 34 votes
  18. Blind Stored XSS in https://partners.acronis.com/admin which lead to sensitive information/PII leakage#1028820Acronis · $150 · 33 votes
  19. XSS in (Support Requests) : User Cases#961226Acronis · $50 · 30 votes
  20. XSS Stored in Cacheable response#1011093Acronis · 28 votes
  21. Cross Site Scripting (Reflected) on https://www.acronis.cz/#1084156Acronis · $50 · 27 votes
  22. XSS in https://promo.acronis.com/#982442Acronis · 25 votes
  23. CSRF and XSS on www.acronis.com#961787Acronis · 25 votes
  24. Reflected XSS on my.acronis.com#1168962Acronis · $50 · 24 votes
  25. Cross Site Scripting (Reflected) on https://www.acronis.cz/dotaznik/roadshow-2020/#1081747Acronis · $50 · 23 votes
  26. Cross-site Scripting (XSS) - Stored | forum.acronis.com#1161241Acronis · 20 votes

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

CyberSIXTSignal over noise
Updated AboutDevelopersSign in