Read the docs

Adobe

Records8047All Threatist records
Exploited (KEV)83In CISA KEV
CVSS critical1940CVSS 9.0–10.0
CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

83 records in Connect · all components

Priority HIGH 71

Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.83406 Published 2023-02-17 No fix listed CWE-284
Priority MEDIUM 55

Adobe Connect version 11.2.3 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary method invocation when AMF messages are deserialized on an Adobe Connect server.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03532 Published 2021-10-21 No fix listed CWE-502
TI-2023-04295 CVE-2023-4662 · GHSA-vfwh-2959-9h69

RCE in Saphira Connect

Priority MEDIUM 51

Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code Inclusion.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01157 Published 2023-09-15 Fixed in 9 CWE-250
TI-2023-04294 CVE-2023-4661 · GHSA-2mfc-5569-842h

SQLi in Saphira Connect

Priority MEDIUM 51

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saphira Saphira Connect allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00904 Published 2023-09-15 Fixed in 9 CWE-89
Priority MEDIUM 45

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00972 Published 2026-09-22 Fixed in 12.11.1, 12.12 +1 CWE-89
Priority MEDIUM 44

Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00921 Published 2026-09-22 Fixed in 12.11.1, 12.12 +1 CWE-20
Priority MEDIUM 44

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00613 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-502
Priority MEDIUM 44

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00825 Published 2024-12-10 No fix listed CWE-79
Priority MEDIUM 43

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00744 Published 2026-09-22 Fixed in 12.11.1, 12.12 +1 CWE-79
Priority MEDIUM 43

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00744 Published 2026-09-22 Fixed in 12.11.1, 12.12 +1 CWE-79
Priority MEDIUM 43

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00629 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-502
Priority MEDIUM 43

Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute malicious scripts in a victim's browser.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00534 Published 2025-10-14 No fix listed CWE-79
Priority MEDIUM 43

Adobe Connect versions 12.8 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00509 Published 2025-05-13 No fix listed CWE-79
Priority MEDIUM 43

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00718 Published 2024-12-10 No fix listed CWE-79
Priority MEDIUM 42

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00304 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
Priority MEDIUM 42

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00304 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
Load more
Open these records in search →