CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Adobe » Connect » * * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2021-40721 79 XSS 2021-10-15 2021-11-30
4.3
None Remote Medium Not required None Partial None
Adobe Connect version 11.2.3 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
2 CVE-2021-40719 502 Exec Code 2021-10-21 2021-11-30
7.5
None Remote Low Not required Partial Partial Partial
Adobe Connect version 11.2.3 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary method invocation when AMF messages are deserialized on an Adobe Connect server. An attacker can leverage this to execute remote code execution on the server.
3 CVE-2021-36063 79 XSS 2021-09-01 2021-09-09
4.3
None Remote Medium Not required None Partial None
Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
4 CVE-2021-36062 79 XSS 2021-09-01 2021-09-09
4.3
None Remote Medium Not required None Partial None
Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
5 CVE-2021-36061 657 2021-09-01 2021-09-09
4.3
None Remote Medium Not required None Partial None
Adobe Connect version 11.2.2 (and earlier) is affected by a secure design principles violation vulnerability via the 'pbMode' parameter. An unauthenticated attacker could leverage this vulnerability to edit or delete recordings on the Connect environment. Exploitation of this issue requires user interaction in that a victim must publish a link of a Connect recording.
6 CVE-2021-28579 269 2021-06-28 2021-07-02
4.0
None Remote Low ??? Partial None None
Adobe Connect version 11.2.1 (and earlier) is affected by an Improper access control vulnerability that can lead to the elevation of privileges. An attacker with 'Learner' permissions can leverage this scenario to access the list of event participants.
7 CVE-2021-21085 20 Exec Code 2021-03-12 2021-12-10
6.8
None Remote Medium Not required Partial Partial Partial
Adobe Connect version 11.0.7 (and earlier) is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine.
8 CVE-2021-21080 79 XSS 2021-03-12 2021-12-03
4.3
None Remote Medium Not required None Partial None
Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field.
9 CVE-2021-21079 79 XSS 2021-03-12 2021-12-03
4.3
None Remote Medium Not required None Partial None
Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field.
10 CVE-2020-24443 79 XSS 2020-11-12 2020-11-17
4.3
None Remote Medium Not required None Partial None
Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
11 CVE-2020-24442 79 XSS 2020-11-12 2020-11-17
4.3
None Remote Medium Not required None Partial None
Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
12 CVE-2018-19718 200 +Info 2019-01-18 2019-01-22
5.0
None Remote Low Not required Partial None None
Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability. Successful exploitation could lead to exposure of the privileges granted to a session.
13 CVE-2018-12805 427 2018-07-20 2019-10-03
7.5
None Remote Low Not required Partial Partial Partial
Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability. Successful exploitation could lead to privilege escalation.
14 CVE-2018-12804 287 Bypass 2018-07-20 2018-09-17
7.5
None Remote Low Not required Partial Partial Partial
Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking.
15 CVE-2018-4994 Bypass 2018-05-19 2020-08-24
5.0
None Remote Low Not required Partial None None
Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability. Successful exploitation could lead to sensitive information disclosure.
16 CVE-2018-4923 78 2018-05-19 2018-06-22
6.4
None Remote Low Not required None Partial Partial
Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection. Successful exploitation could lead to arbitrary file deletion.
17 CVE-2018-4921 434 2018-05-19 2020-08-24
4.3
None Remote Medium Not required None Partial None
Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability. Successful exploitation could lead to information disclosure.
18 CVE-2017-11291 918 Bypass 2017-12-09 2017-12-14
6.4
None Remote Low Not required Partial Partial None
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls.
19 CVE-2017-11290 1021 2017-12-09 2019-10-03
4.3
None Remote Medium Not required None Partial None
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or Clickjacking) vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing (or clickjacking) attacks.
20 CVE-2017-11289 79 XSS 2017-12-09 2017-12-14
4.3
None Remote Medium Not required None Partial None
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.
21 CVE-2017-11288 79 XSS 2017-12-09 2017-12-14
4.3
None Remote Medium Not required None Partial None
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.
22 CVE-2017-11287 79 XSS 2017-12-09 2017-12-14
4.3
None Remote Medium Not required None Partial None
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.
23 CVE-2017-3103 79 XSS 2017-07-17 2017-07-19
4.3
None Remote Medium Not required None Partial None
Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to a stored cross-site scripting attack.
24 CVE-2017-3102 79 XSS 2017-07-17 2017-07-19
4.3
None Remote Medium Not required None Partial None
Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross-site scripting attack.
25 CVE-2017-3101 2017-07-17 2019-10-03
5.0
None Remote Low Not required None Partial None
Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack.
26 CVE-2016-7851 79 XSS 2016-11-08 2017-09-03
4.3
None Remote Medium Not required None Partial None
Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks.
27 CVE-2016-0950 20 2016-02-10 2016-12-06
5.0
None Remote Low Not required None Partial None
Adobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified vectors.
28 CVE-2016-0949 2016-02-10 2016-12-06
10.0
None Remote Low Not required Complete Complete Complete
Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL.
29 CVE-2016-0948 352 CSRF 2016-02-10 2016-12-06
6.8
None Remote Medium Not required Partial Partial Partial
Cross-site request forgery (CSRF) vulnerability in Adobe Connect before 9.5.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
30 CVE-2015-0344 79 XSS 2015-06-13 2016-12-31
4.3
None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in the web app in Adobe Connect before 9.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
31 CVE-2015-0343 79 XSS 2015-06-13 2016-12-31
4.3
None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in admin/home/homepage/search in the web app in Adobe Connect before 9.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
Total number of vulnerabilities : 31   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.