CVE-2017-11288 — Cross-site Scripting in Adobe Connect

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
1.2%
top 20.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Connect
Timeline
PublishedDec 9
Latest updateMay 17

Description

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

▶NVDadobe/connect9.6.2

🔴Vulnerability Details

2
GHSA
GHSA-8g4h-cg34-7fmx: An issue was discovered in Adobe Connect 9↗2022-05-17
▶
CVEList
CVE-2017-11288: An issue was discovered in Adobe Connect 9↗2017-12-09
▶
CVE-2017-11288 — Cross-site Scripting in Adobe Connect | cvebase