Adobe Connect Privilege Escalation Vulnerability (APSB21-36)

Adobe Connect is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:connect";...

Adobe Connect <= 11.2.1 Privilege Escalation Vulnerability (APSB21-36)

The version of Adobe Connect installed on the remote host is prior to 11.2.2. It is, therefore, affected by a vulnerability as referenced in the apsb21-36 advisory. - Adobe Connect version 11.2.1 and earlier is affected by an Improper access control vulnerability that can lead to the elevation of...

Vulnerabilities fixed in Adobe products

Several vulnerabilities have been fixed in several Adobe products. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Increased user privileges The exact damage varies by...

Adobe Connect Access Control Error Vulnerability

Adobe Connect is an online video conferencing software. A security vulnerability exists in Adobe Connect. An attacker could exploit the vulnerability to elevate privileges...

Adobe Connect 安全漏洞

Adobe Connect is an online video conferencing software. A security vulnerability exists in Adobe Connect. An attacker could exploit the vulnerability to elevate privileges...

PT-2021-6264 · Adobe · Connect

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 11.2.1 and earlier Description: The issue is related to improper access control in Adobe Connect, which can lead to the elevation of privileges. An attacker with Learner permissions can exploit this to access the list o...

APSB21-36 Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves an important vulnerability. Successful exploitation could lead to privilege escalation within the context of the victim's browser...

The vulnerability of Adobe Connect’s instant messaging program, related to the lack of protective measures for the website structure, allows a hacker to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the Adobe Connect instant messaging program relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

The vulnerability of the Adobe Connect instant messaging program, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Connect instant messaging program is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the administrator account’s context...

The vulnerability of Adobe Connect’s instant messaging program, related to the lack of protective measures for the website structure, allows a hacker to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of Adobe Connect’s instant messaging service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

The vulnerability of Adobe Connect’s instant messaging program, related to the lack of protective measures for the website structure, allows a hacker to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of Adobe Connect’s instant messaging service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

CVE-2021-21085

Adobe Connect version 11.0.7 and earlier is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine...

CVE-2021-21079

Adobe Connect version 11.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing t...

CVE-2021-21080

Adobe Connect version 11.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing t...

CVE-2021-21079

Adobe Connect version 11.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing t...

CVE-2021-21080

Adobe Connect version 11.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing t...

CVE-2021-21085

Adobe Connect version 11.0.7 and earlier is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine...

Input validation

Adobe Connect version 11.0.7 and earlier is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine...

Cross site scripting

Adobe Connect version 11.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing t...

Cross site scripting

Adobe Connect version 11.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing t...