CVE-2021-21085 Adobe Connect CSV injection via export feature could lead to code execution

Adobe Connect version 11.0.7 and earlier is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine...

CVE-2021-21085

CVE-2021-21085 affects Adobe Connect 11.0.7 and earlier, via an Input Validation vulnerability in the export feature. An attacker can inject a payload into an online event form and achieve code execution if the victim exports and opens the data locally. The issue is documented across multiple sou...

CVE-2021-21080

Adobe Connect 11.0.7 and earlier are affected by a reflected cross-site scripting (XSS) vulnerability, exposed via a vulnerable query parameter. An attacker could inject JavaScript executed in the victim’s browser when visiting the affected page. Fixed in later updates; remediation is to upgrade ...

CVE-2021-21080 Adobe Connect Reflected Cross-site Scripting via query parameter

Adobe Connect version 11.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing t...

CVE-2021-21079 Adobe Connect Reflected Cross-site Scripting via archiveOffset parameter

Adobe Connect version 11.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing t...

CVE-2021-21079 Adobe Connect Reflected Cross-site Scripting via archiveOffset parameter

Adobe Connect version 11.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing t...

CVE-2021-21079

Adobe Connect 11.0.7 and earlier are affected by a reflected Cross‑Site Scripting (XSS) vulnerability (CVE‑2021‑21079) in a vulnerable field; attackers could inject JavaScript executed in the victim’s browser. The issue is documented in APSB21‑19 and NVD/NIST records. Remediation is available: Ad...

Adobe Connect Multiple Vulnerabilities (APSB21-19)

Adobe Connect is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:connect"; ifdescription...

Adobe Connect 输入验证错误漏洞

Adobe Connect is an online video conferencing software. An improper input validation vulnerability exists in Adobe Connect 11.0.5 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

Adobe Creative Cloud Desktop Application 跨站脚本漏洞

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.0.5 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary JavaScript in a browser...

Adobe Creative Cloud Desktop Application 跨站脚本漏洞

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.0.5 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary JavaScript in a browser...

Adobe Connect Improper Input Validation Vulnerability

Adobe Connect is an online video conferencing software. An improper input validation vulnerability exists in Adobe Connect 11.0.5 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

Vulnerabilities fixed in Adobe Connect

Adobe has fixed vulnerabilities in Adobe Connect. A malicious party could potentially exploit the vulnerabilities remotely to execute arbitrary code under the privileges of the application. In addition, the vulnerabilities can be exploited to performing a Cross-Site Scripting XSS attack. A such...

Adobe Connect <= 11.0.5 Multiple Vulnerabilities (APSB21-19)

The version of Adobe Connect installed on the remote host is prior to 11.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-19 advisory. - Adobe Connect version 11.0.7 and earlier is affected by an Input Validation vulnerability in the export feature. An...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2021-18026)

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.0.5 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary JavaScript in a browser...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2021-18028)

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.0.5 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary JavaScript in a browser...

March 2021 Patch Tuesday – 82 Vulnerabilities, 10 Critical, Adobe

This month’s Microsoft Patch Tuesday addresses 82 vulnerabilities, of which 10 are rated with Critical severity. This follows an out-of-band security update on March 2 to address critical vulnerabilities in Microsoft Exchange. Adobe released patches today for its FrameMaker, Creative Cloud Deskto...

Adobe Connect 10 - Username Disclosure

Title: Adobe Connect 10 - Username Disclosure Author: h4shur date:2021-02-07 Vendor Homepage: https://www.adobe.com Software Link: https://www.adobe.com/products/adobeconnect.html Version: 10 and earlier Tested on: Windows 10 & Google Chrome Category : Web Application Bugs Description : By adding...

Adobe Connect 10 Username Disclosure

Title: adobe connect 10 Local Route Disclosure Author: h4shur date:2021-02-07 Vendor Homepage: https://www.adobe.com Software Link: https://www.adobe.com/products/adobeconnect.html Version: 10 and earlier Tested on: Windows 10 & Google Chrome Category : Web Application Bugs Description : There ar...

The vulnerability of the Adobe Connect instant messaging program, related to the lack of protective measures for the website structure, allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the Adobe Connect instant messaging program relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...