Priority MEDIUM 44
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00613 · Published 2026-04-14 · Fixed in 12.11, 2025.9 CWE-502
Priority MEDIUM 40
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could result in privilege escalation.
CVSS 3.1HIGH 8.7· Network · Low privileges · User interaction · EPSS 0.00417 · Published 2026-04-14 · Fixed in 12.11, 2025.9 CWE-79
Priority LOW 27
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0028 · Published 2026-04-14 · Fixed in 12.11, 2025.9 CWE-79
Priority MEDIUM 42
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.00304 · Published 2026-04-14 · Fixed in 12.11, 2025.9 CWE-79
Priority LOW 27
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0024 · Published 2026-04-14 · Fixed in 12.11, 2025.9 CWE-79
Priority MEDIUM 42
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.00304 · Published 2026-04-14 · Fixed in 12.11, 2025.9 CWE-79
Priority MEDIUM 43
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.00629 · Published 2026-04-14 · Fixed in 12.11, 2025.9 CWE-502
Priority MEDIUM 42
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.00304 · Published 2026-04-14 · Fixed in 12.11, 2025.9 CWE-79