CO
Product
Connect
83
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 24High 12Medium 45Low 0
Watch
Add Connect to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-54042 | 6.1 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-49550 | 6.1 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2023-4663 | 6.1 | Sep 15 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Saphira Saphira Connect allows Reflected XSS Affected: before 9.0 |
| CVE-2023-29306 | 6.1 | Sep 13 | Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: through 12.3 |
| CVE-2023-29305 | 6.1 | Sep 13 | Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: through 12.3 |
| CVE-2021-40721 | 6.1 | Oct 15 | Adobe Connect version 11.2.3 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: 11.0 through 11.2.3 |
| CVE-2021-36063 | 6.1 | Sep 1 | Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into… Affected: through 11.2.2 |
| CVE-2021-36062 | 6.1 | Sep 1 | Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into… Affected: through 11.2.2 |
| CVE-2021-21080 | 6.1 | Mar 12 | Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: through 11.0.7 |
| CVE-2021-21079 | 6.1 | Mar 12 | Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: through 11.0.7 |
| CVE-2020-24443 | 6.1 | Nov 12 | Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: through 11.0 |
| CVE-2020-24442 | 6.1 | Nov 12 | Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability Affected: through 11.0 |
| CVE-2018-4921 | 6.1 | May 19 | Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability Affected: through 9.7 |
| CVE-2017-11290 | 6.1 | Dec 9 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions Affected: through 9.6.2 |
| CVE-2017-11289 | 6.1 | Dec 9 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions Affected: through 9.6.2 |
| CVE-2017-11288 | 6.1 | Dec 9 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions Affected: through 9.6.2 |
| CVE-2017-11287 | 6.1 | Dec 9 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions Affected: through 9.6.2 |
| CVE-2017-3103 | 6.1 | Jul 17 | Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability Affected: through 9.6.1 |
| CVE-2017-3102 | 6.1 | Jul 17 | Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability Affected: through 9.6.1 |
| CVE-2016-7851 | 6.1 | Nov 8 | Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module Affected: through 9.5.6 |
| CVE-2025-30316 | 5.4 | May 13 | Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious… Affected: before 12.9 |
| CVE-2024-54041 | 5.4 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts… Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-54040 | 5.4 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts… Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2024-54039 | 5.4 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts… Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2021-36061 | 5.4 | Sep 1 | Adobe Connect version 11.2.2 (and earlier) is affected by a secure design principles violation vulnerability via the 'pbMode' parameter Affected: through 11.2.2 |
| CVE-2023-22232 | 5.3 | Feb 17 | Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass Affected: 11.0 through 11.4.5; 12.0 through 12.1.5 |
| CVE-2018-19718 | 5.3 | Jan 18 | Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability Affected: through 9.8.1 |
| CVE-2016-0950 | 5.3 | Feb 10 | Adobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified vectors Affected: through 9.5.2 |
| CVE-2025-54196 | 4.3 | Oct 14 | Adobe Connect versions 12.9 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability Affected: before 12.10 |
| CVE-2024-54038 | 4.3 | Dec 10 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass Affected: before 11.4.9; 12.0 before 12.7 |
| CVE-2021-28579 | 4.3 | Jun 28 | Adobe Connect version 11.2.1 (and earlier) is affected by an Improper access control vulnerability that can lead to the elevation of privileges Affected: before 11.2.2 |
| CVE-2015-0344 | – | Jun 13 | Cross-site scripting (XSS) vulnerability in the web app in Adobe Connect before 9.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: through 9.3 |
| CVE-2015-0343 | – | Jun 13 | Cross-site scripting (XSS) vulnerability in admin/home/homepage/search in the web app in Adobe Connect before 9.4 allows remote attackers to inject arbitrary web script or HTML… Affected: through 9.3 |