Adobe Connect vulnerabilities
86 known vulnerabilities affecting adobe/connect.
Total CVEs
86
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
CRITICAL24HIGH12MEDIUM49LOW1
Vulnerabilities
Page 4 of 5
CVE-2017-3102P4MEDIUMCVSS 6.1≤ 9.6.12017-07-17
CVE-2017-3102 [MEDIUM] CWE-79 CVE-2017-3102: Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Succes
Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross-site scripting attack.
nvd
CVE-2020-24442P4MEDIUMCVSS 6.1≤ 11.0≥ unspecified, ≤ 11.02020-11-12
CVE-2020-24442 [MEDIUM] CWE-79 CVE-2020-24442: Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulne
Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2020-24443P4MEDIUMCVSS 6.1≤ 11.0≥ unspecified, ≤ 11.02020-11-12
CVE-2020-24443 [MEDIUM] CWE-79 CVE-2020-24443: Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulne
Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2021-36063P4MEDIUMCVSS 6.1≤ 11.2.2≥ unspecified, ≤ 11.2.22021-09-01
CVE-2021-36063 [MEDIUM] CWE-79 CVE-2021-36063: Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerabi
Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-49550P4MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10
CVE-2024-49550 [MEDIUM] CWE-79 CVE-2024-49550: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XS
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2026-34614P4MEDIUMCVSS 6.1fixed in 12.112026-04-14
CVE-2026-34614 [MEDIUM] CWE-79 CVE-2026-34614: Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (X
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.
nvd
CVE-2024-54039P4MEDIUMCVSS 5.4fixed in 11.4.9≥ 12.0, < 12.72024-12-10
CVE-2024-54039 [MEDIUM] CWE-79 CVE-2024-54039: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS)
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-54040P4MEDIUMCVSS 5.4fixed in 11.4.9≥ 12.0, < 12.72024-12-10
CVE-2024-54040 [MEDIUM] CWE-79 CVE-2024-54040: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS)
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-54041P4MEDIUMCVSS 5.4fixed in 11.4.9≥ 12.0, < 12.72024-12-10
CVE-2024-54041 [MEDIUM] CWE-79 CVE-2024-54041: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS)
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2017-11287P4MEDIUMCVSS 6.1≤ 9.6.22017-12-09
CVE-2017-11287 [MEDIUM] CWE-79 CVE-2017-11287: An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scriptin
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.
nvd
CVE-2017-11289P4MEDIUMCVSS 6.1≤ 9.6.22017-12-09
CVE-2017-11289 [MEDIUM] CWE-79 CVE-2017-11289: An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scriptin
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.
nvd
CVE-2017-11288P4MEDIUMCVSS 6.1≤ 9.6.22017-12-09
CVE-2017-11288 [MEDIUM] CWE-79 CVE-2017-11288: An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scriptin
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.
nvd
CVE-2013-7371P4MEDIUMCVSS 6.1≥ 0, < 2.8.22022-05-05
CVE-2013-7371 [MEDIUM] CWE-79 Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware
Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware
node-connect before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)
### Overview
Connect is a stack of middleware that is executed in order in each request.
The "methodOverride" middleware allows the http post to override the method of th
ghsaosv
CVE-2021-21080P4MEDIUMCVSS 6.1≤ 11.0.7≥ unspecified, ≤ 11.0.72021-03-12
CVE-2021-21080 [MEDIUM] CWE-79 CVE-2021-21080: Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vul
Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-54049P4MEDIUMCVSS 6.1fixed in 11.4.9≥ 12.0, < 12.72024-12-10
CVE-2024-54049 [MEDIUM] CWE-79 CVE-2024-54049: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XS
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2021-21079P4MEDIUMCVSS 6.1≤ 11.0.7≥ unspecified, ≤ 11.0.72021-03-12
CVE-2021-21079 [MEDIUM] CWE-79 CVE-2021-21079: Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vul
Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field.
nvd
CVE-2021-40721P4MEDIUMCVSS 6.1≥ 11.0, ≤ 11.2.3≥ unspecified, ≤ 11.2.32021-10-15
CVE-2021-40721 [MEDIUM] CWE-79 CVE-2021-40721: Adobe Connect version 11.2.3 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vul
Adobe Connect version 11.2.3 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-4663P4MEDIUMCVSS 6.1fixed in 9.02023-09-15
CVE-2023-4663 [MEDIUM] CWE-80 CVE-2023-4663: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Saphi
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Saphira Saphira Connect allows Reflected XSS.
This issue affects Saphira Connect: before 9.
nvd
CVE-2023-29305P4MEDIUMCVSS 6.1≤ 12.32023-09-13
CVE-2023-29305 [MEDIUM] CWE-79 CVE-2023-29305: Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulne
Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-29306P4MEDIUMCVSS 6.1≤ 12.32023-09-13
CVE-2023-29306 [MEDIUM] CWE-79 CVE-2023-29306: Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulne
Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd