Approved changes feed: RSS · Atom

cpe:2.3:a:synology:synology_active_backup_for_business_agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductSynology Active Backup For Business Agent (62c632d7-808c-54af-b300-efca82b8f193)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-66592 vulnerable 2026-06-08 07:41:19.246633 Details available
MEDIUM (6.1)
An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation.
Published: 2026-05-27T08:43:05.069Z
Updated: 2026-06-02T08:20:25.069Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52950 vulnerable 2026-06-08 06:17:55.983359 Details available
MEDIUM (5.3)
Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credential via unspecified vectors.
Published: 2024-09-26T03:40:25.753Z
Updated: 2024-11-15T17:34:23.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52949 vulnerable 2026-06-08 06:17:55.982788 Details available
MEDIUM (5.5)
Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.
Published: 2024-09-26T03:42:35.862Z
Updated: 2024-11-15T17:34:20.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52948 vulnerable 2026-06-08 06:17:55.982096 Details available
MEDIUM (5)
Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.
Published: 2024-09-26T03:41:55.659Z
Updated: 2024-11-15T17:34:45.374Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52947 vulnerable 2026-06-08 06:17:55.979997 Details available
MEDIUM (4)
Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecified vectors. The backup functionality will continue to operate and will not be affected by the logout.
Published: 2024-09-26T03:41:03.462Z
Updated: 2024-09-26T14:38:53.499Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.