Synology Active Backup For Business vulnerabilities

4 vulnerabilities

Known vulnerabilities in Synology Active Backup For Business, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.6CVE-2025-30028synologyactive_backup_for_business
EPSS score
0.37%
A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files.6.5CVE-2024-47264synologyactive_backup_for_business+1
EPSS score
0.57%
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in agent-related functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users with administrator privileges to delete arbitrary files via unspecified vectors.6.5CVE-2024-47265synologyactive_backup_for_business+1
EPSS score
0.40%
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in encrypted share umount functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users to write specific files via unspecified vectors.2.7CVE-2024-47266synologyactive_backup_for_business+1
EPSS score
0.48%
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in share file list functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users with administrator privileges to read specific files containing non-sensitive information via unspecified vectors.