CVE-2021-40721 Adobe Connect Reflected Cross Site Scripting

Adobe Connect version 11.2.3 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2021-101533)

Adobe Connect is a suite of software for remote training, web conferencing, presentations and desktop sharing. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.2.2 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

Deserialization Vulnerability in Adobe Connect Untrusted Data

Adobe Connect is a suite of software for remote training, web conferencing, presentations and desktop sharing. A deserialization of untrusted data vulnerability exists in Adobe Connect 11.2.2 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

Adobe Connect <= 11.2.3 Multiple Arbitrary Code Execution Vulnerabilities (APSB21-91)

The version of Adobe Connect installed on the remote host is prior to 11.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-91 advisory. - Adobe Connect version 11.2.3 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacke...

Adobe Connect 代码问题漏洞

Adobe Connect is a suite of software for remote training, web conferencing, presentations and desktop sharing. A deserialization of untrusted data vulnerability exists in Adobe Connect 11.2.2 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

Adobe Connect 跨站脚本漏洞

Adobe Connect is a suite of software for remote training, web conferencing, presentations and desktop sharing. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.2.2 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

Vulnerabilities fixed in Adobe Connect

Adobe has fixed two vulnerabilities in Adobe Connect. A unauthenticated remote malicious person could exploit the vulnerabilities potentially exploit them to execute arbitrary code with permissions of the application. Adobe has released updates to fix the vulnerabilities in Connect 11.2.3. For mo...

APSB21-91 Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution...

CVE-2021-36061

Adobe Connect version 11.2.2 and earlier is affected by a secure design principles violation vulnerability via the 'pbMode' parameter. An unauthenticated attacker could leverage this vulnerability to edit or delete recordings on the Connect environment. Exploitation of this issue requires user...

CVE-2021-36062

Adobe Connect version 11.2.2 and earlier is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious...

CVE-2021-36063

Adobe Connect version 11.2.2 and earlier is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing th...

CVE-2021-36061

Adobe Connect version 11.2.2 and earlier is affected by a secure design principles violation vulnerability via the 'pbMode' parameter. An unauthenticated attacker could leverage this vulnerability to edit or delete recordings on the Connect environment. Exploitation of this issue requires user...

CVE-2021-36062

Adobe Connect version 11.2.2 and earlier is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious...

CVE-2021-36063

Adobe Connect version 11.2.2 and earlier is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing th...

Cross site scripting

Adobe Connect version 11.2.2 and earlier is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious...

Cross site scripting

Adobe Connect version 11.2.2 and earlier is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing th...

Code injection

Adobe Connect version 11.2.2 and earlier is affected by a secure design principles violation vulnerability via the 'pbMode' parameter. An unauthenticated attacker could leverage this vulnerability to edit or delete recordings on the Connect environment. Exploitation of this issue requires user...

CVE-2021-36063 Adobe Connect Reflected Cross-site Scripting via 'isTabletDeviceHTML' parameter

Adobe Connect version 11.2.2 and earlier is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing th...

CVE-2021-36063

Adobe Connect 11.2.2 and earlier are affected by a Reflected Cross‑site Scripting vulnerability (CVE-2021-36063) in vulnerable form fields, potentially allowing an attacker to inject and execute malicious JavaScript in a victim’s browser when visiting a page containing the vulnerable field. Conne...

CVE-2021-36061

Adobe Connect 11.2.2 and earlier is affected by a secure design principles violation (pbMode) that allows editing/deleting recordings. Exploitation requires a victim to publish a link, and attacker is unauthenticated. Remediation: apply APSB21-66 update to 11.2.3 or later (per sources noting 11.2...