Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

19 records

Advisory: Adobe Connect — helpx.adobe.com/security/products/connect/apsb24-99.html Clear all filters
TI-2024-36187 CVE-2024-54037 · GHSA-96hh-c9fq-9c4x

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Priority LOW 39

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser…

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.00906 Published 2024-12-10 No fix listed CWE-79
TI-2024-36190 CVE-2024-54040 · GHSA-m65q-c8pc-crxw

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 25

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00405 Published 2024-12-10 No fix listed CWE-79
TI-2024-36186 CVE-2024-54036 · GHSA-8hg3-p9ww-qwjc

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Priority MEDIUM 41

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00718 Published 2024-12-10 No fix listed CWE-79
TI-2024-36191 CVE-2024-54041 · GHSA-3v92-gh9f-x64c

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 25

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00405 Published 2024-12-10 No fix listed CWE-79
TI-2024-36189 CVE-2024-54039 · GHSA-34fw-7qxm-rh77

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 25

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00405 Published 2024-12-10 No fix listed CWE-79
TI-2024-36185 CVE-2024-54034 · GHSA-5xcv-cwjr-gcv5

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Priority MEDIUM 43

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00718 Published 2024-12-10 No fix listed CWE-79
TI-2024-36188 CVE-2024-54038 · GHSA-2qhr-g294-85mf

Adobe Connect | Improper Access Control (CWE-284)

Priority LOW 21

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00518 Published 2024-12-10 No fix listed CWE-284
TI-2024-36184 CVE-2024-54032 · GHSA-c47m-xpm8-8x4w

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Priority MEDIUM 44

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00825 Published 2024-12-10 No fix listed CWE-79