Browse / Acronis

Acronis

See its reports on the map

Attack surface: 2,283 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Acronis

• Access Control39
• Cross-site Scripting35
• Authentication10
• Information Disclosure7
• Misconfiguration6
• SQL Injection5

Most upvoted reports

AllValidInformativeN/ADuplicate

1. No Rate Limit On Forgot Password PageN/AImproper Access Control - Generic · medium
   13 votes
2. Session Fixation on AcronisN/ASession Fixation · medium
   6 votes
3. Unrestricted file upload vulnerability in IMCEN/ARemote File Inclusion · medium
   6 votes
4. Information Disclosure via ZIP file on AWS Bucket [http://acronis.1.s3.amazonaws.com]N/AInformation Disclosure · medium
   5 votes
5. CVE-2020-6287 https://redapi2.acronis.comN/AImproper Access Control - Generic · critical
   3 votes
6. Subdomains takeover of register.acronis.com, promo.acronis.com, info.acronis.com and promosandbox.acronis.comN/APrivilege Escalation · high
   2 votes
7. ClickJackingN/AUI Redressing (Clickjacking) · high
   2 votes