Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Connect
(Adobe)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 35 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2018-07-20 | CVE-2018-12805 | Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability. Successful exploitation could lead to privilege escalation. | Connect | 9.8 | ||
| 2018-07-20 | CVE-2018-12804 | Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking. | Connect | 9.8 | ||
| 2017-07-17 | CVE-2017-3103 | Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to a stored cross-site scripting attack. | Connect | 6.1 | ||
| 2017-07-17 | CVE-2017-3102 | Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross-site scripting attack. | Connect | 6.1 | ||
| 2017-12-09 | CVE-2017-11291 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls. | Connect | 10.0 | ||
| 2017-12-09 | CVE-2017-11289 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure. | Connect | 6.1 | ||
| 2017-12-09 | CVE-2017-11288 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure. | Connect | 6.1 | ||
| 2017-12-09 | CVE-2017-11287 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure. | Connect | 6.1 | ||
| 2016-11-08 | CVE-2016-7851 | Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks. | Connect | 6.1 | ||
| 2016-05-29 | CVE-2016-4118 | Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors. | Connect | 7.8 |