Adobe Connect vulnerabilities

77 known vulnerabilities affecting adobe/connect.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL18HIGH10MEDIUM48LOW1

Vulnerabilities

Page 2 of 4

CVE-2024-54047MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54047 [MEDIUM] CWE-79 CVE-2024-54047: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XS Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

nvd

CVE-2024-49550MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-49550 [MEDIUM] CWE-79 CVE-2024-49550: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XS Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

nvd

CVE-2024-54048MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54048 [MEDIUM] CWE-79 CVE-2024-54048: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XS Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

nvd

CVE-2024-54051MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54051 [MEDIUM] CWE-601 CVE-2024-54051: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a URL Redirection to Untrusted Site Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.

nvd

CVE-2024-54045MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54045 [MEDIUM] CWE-79 CVE-2024-54045: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XS Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

nvd

CVE-2024-54043MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54043 [MEDIUM] CWE-79 CVE-2024-54043: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XS Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

nvd

CVE-2024-54040MEDIUMCVSS 5.4fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54040 [MEDIUM] CWE-79 CVE-2024-54040: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

nvd

CVE-2024-54041MEDIUMCVSS 5.4fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54041 [MEDIUM] CWE-79 CVE-2024-54041: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

nvd

CVE-2024-54046MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54046 [MEDIUM] CWE-79 CVE-2024-54046: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XS Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

nvd

CVE-2024-54044MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54044 [MEDIUM] CWE-79 CVE-2024-54044: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XS Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

nvd

CVE-2024-54050MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54050 [MEDIUM] CWE-601 CVE-2024-54050: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a URL Redirection to Untrusted Site Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.

nvd

CVE-2024-54049MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54049 [MEDIUM] CWE-79 CVE-2024-54049: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XS Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

nvd

CVE-2024-54042MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54042 [MEDIUM] CWE-79 CVE-2024-54042: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XS Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

nvd

CVE-2024-54038MEDIUMCVSS 4.3fixed in 11.4.9≥ 12.0, < 12.72024-12-10

CVE-2024-54038 [MEDIUM] CWE-284 CVE-2024-54038: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by an Improper Access Control vulnerabi Adobe Connect versions 12.6, 11.4.7 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.

nvd

CVE-2023-4661CRITICALCVSS 9.8fixed in 9.02023-09-15

CVE-2023-4661 [CRITICAL] CWE-89 CVE-2023-4661: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saphira Saphira Connect allows SQL Injection. This issue affects Saphira Connect: before 9.

nvd

CVE-2023-4662CRITICALCVSS 9.8fixed in 9.02023-09-15

CVE-2023-4662 [CRITICAL] CWE-250 CVE-2023-4662: Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code In Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code Inclusion. This issue affects Saphira Connect: before 9.

nvd

CVE-2023-4665HIGHCVSS 8.8fixed in 9.02023-09-15

CVE-2023-4665 [HIGH] CWE-279 CVE-2023-4665: Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows Privilege E Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. This issue affects Saphira Connect: before 9.

nvd

CVE-2023-4664HIGHCVSS 8.8fixed in 9.02023-09-15

CVE-2023-4664 [HIGH] CWE-276 CVE-2023-4664: Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. This issue affects Saphira Connect: before 9.

nvd

CVE-2023-4663MEDIUMCVSS 6.1fixed in 9.02023-09-15

CVE-2023-4663 [MEDIUM] CWE-80 CVE-2023-4663: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Saphi Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Saphira Saphira Connect allows Reflected XSS. This issue affects Saphira Connect: before 9.

nvd

CVE-2023-29305MEDIUMCVSS 6.1≤ 12.32023-09-13

CVE-2023-29305 [MEDIUM] CWE-79 CVE-2023-29305: Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulne Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

nvd

← Previous2 / 4Next →