CO
Product
Connect
83
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 24High 12Medium 45Low 0
Watch
Add Connect to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-11291 | 10.0 | Dec 9 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions Affected: through 9.6.2 |
| CVE-2026-75682 | 9.9 | Sep 22 | Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) Affected: before 12.12 |
| CVE-2023-4662 | 9.8 | Sep 15 | Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code Inclusion Affected: before 9.0 |
| CVE-2023-4661 | 9.8 | Sep 15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saphira Saphira Connect allows SQL Injection Affected: before 9.0 |
| CVE-2021-40719 | 9.8 | Oct 21 | Adobe Connect version 11.2.3 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary method invocation when AMF messages are… Affected: through 11.2.3 |
| CVE-2018-12805 | 9.8 | Jul 20 | Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability Affected: through 9.7.5 |
| CVE-2018-12804 | 9.8 | Jul 20 | Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability Affected: through 9.7.5 |
| CVE-2016-0949 | 9.8 | Feb 10 | Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL Affected: through 9.5.2 |
| CVE-2026-27303 | 9.6 | Apr 14 | Adobe Connect | Deserialization of Untrusted Data (CWE-502) Affected: before 12.11 |
| CVE-2026-75689 | 9.3 | Sep 22 | Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 12.12 |
| CVE-2026-75686 | 9.3 | Sep 22 | Adobe Connect | Improper Input Validation (CWE-20) Affected: before 12.12 |
| CVE-2026-75698 | 9.3 | Sep 22 | Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) Affected: before 12.12 |
| CVE-2026-75684 | 9.3 | Sep 22 | Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 12.12 |
| CVE-2026-75697 | 9.3 | Sep 22 | Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 12.12 |
| CVE-2026-27246 | 9.3 | Apr 14 | Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 12.11 |
| CVE-2026-27245 | 9.3 | Apr 14 | Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) Affected: before 12.11 |
| CVE-2026-34615 | 9.3 | Apr 14 | Adobe Connect | Deserialization of Untrusted Data (CWE-502) Affected: before 12.11 |
| CVE-2026-27243 | 9.3 | Apr 14 | Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) Affected: before 12.11 |
| CVE-2025-49553 | 9.3 | Oct 14 | Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute malicious scripts in… Affected: before 12.10 |
| CVE-2025-43567 | 9.3 | May 13 | Adobe Connect versions 12.8 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into… Affected: before 12.9 |
| CVE-2024-54036 | 9.3 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts… Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-54034 | 9.3 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-54032 | 9.3 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts… Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2018-4923 | 9.1 | May 19 | Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection Affected: through 9.7 |
| CVE-2023-4665 | 8.8 | Sep 15 | Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation Affected: before 9.0 |
| CVE-2023-4664 | 8.8 | Sep 15 | Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation Affected: before 9.0 |
| CVE-2016-0948 | 8.8 | Feb 10 | Cross-site request forgery (CSRF) vulnerability in Adobe Connect before 9.5.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors Affected: through 9.5 |
| CVE-2026-34617 | 8.7 | Apr 14 | Adobe Connect | Cross-site Scripting (XSS) (CWE-79) Affected: before 12.11 |
| CVE-2026-34689 | 8.6 | Sep 22 | Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Affected: before 12.12 |
| CVE-2025-49552 | 8.1 | Oct 14 | Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a high-privileged attacker to execute… Affected: before 12.10 |
| CVE-2024-54037 | 8.1 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute arbitrary… Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2021-21085 | 7.8 | Mar 12 | Adobe Connect version 11.0.7 (and earlier) is affected by an Input Validation vulnerability in the export feature Affected: through 11.0.7 |
| CVE-2016-4118 | 7.8 | May 30 | Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors Affected: through 9.5.2 |
| CVE-2026-83964 | 7.5 | Sep 22 | Adobe Connect | Improper Certificate Validation (CWE-295) Affected: before 12.12 |
| CVE-2018-4994 | 7.5 | May 19 | Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability Affected: through 9.7.5 |
| CVE-2017-3101 | 7.5 | Jul 17 | Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability Affected: through 9.6.1 |
| CVE-2026-48361 | 6.1 | Sep 22 | Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 12.12 |
| CVE-2026-21331 | 6.1 | Apr 14 | Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) Affected: before 12.11 |
| CVE-2026-34614 | 6.1 | Apr 14 | Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) Affected: before 12.11 |
| CVE-2025-30315 | 6.1 | May 13 | Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into… Affected: before 12.9 |
| CVE-2025-30314 | 6.1 | May 13 | Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into… Affected: before 12.9 |
| CVE-2024-54051 | 6.1 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-54050 | 6.1 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-54049 | 6.1 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-54048 | 6.1 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-54047 | 6.1 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-54046 | 6.1 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-54045 | 6.1 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-54044 | 6.1 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-54043 | 6.1 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: before 11.4.9; 12.0 before 12.7 |
