CVE-2025-54196

CWE-601 — Open Redirect3 documents3 sources
Severity
6.1MEDIUM
EPSS
0.0%
top 87.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe ConnectAdobe Adobe Connect
Timeline
PublishedOct 14
Latest updateOct 15

Description

Adobe Connect versions 12.9 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction in that a victim must click on a crafted link.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 1.6 | Impact: 1.4

Affected Packages2 packages

▶NVDadobe/connect< 12.10
▶CVEListV5adobe/adobe_connect12.9

🔴Vulnerability Details

2
GHSA
GHSA-224p-6f6c-j2f6: Adobe Connect versions 12↗2025-10-15
▶
CVEList
Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)↗2025-10-14
▶