APSB18-18 Security update available for Adobe Connect

An important authentication bypass vulnerability CVE-2018-4994 exists in Adobe Connect versions 9.7.5 and earlier. Successful exploitation of this vulnerability could result in sensitive information disclosure...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Connect, Adobe Flash Player, and Adobe Creative Cloud Desktop Application. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to revi...

Adobe Connect Multiple Vulnerabilities (APSB18-06)

Adobe Connect is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:connect"; ifdescription...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2018-07306)

Adobe Connect web conferencing software service provides an immersive online meeting experience for collaboration, virtual classrooms and large-scale webinars. A cross-site scripting vulnerability exists in Adobe Connect due to the software's failure to properly restrict SWF file uploads, which...

Adobe Connect Arbitrary File Deletion Vulnerability

Adobe Connect web conferencing software service provides an immersive online meeting experience for collaboration, virtual classrooms and large-scale webinars. An arbitrary file deletion vulnerability exists in Adobe Connect due to a command injection flaw in the Adobe Connect URI handler that ca...

Adobe Connect <= 9.7.0 Multiple Vulnerabilities (APSB18-06)

The version of Adobe Connect installed on the remote host is prior to 9.7.5. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb18-06 advisory. - Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection. Successful exploitation could lead to...

Spoofing

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress or Clickjacking vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing or clickjacking attacks...

CVE-2017-11291

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery SSRF vulnerability exists that could be abused to bypass network access controls...

CVE-2017-11289

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure...

CVE-2017-11289

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure...

CVE-2017-11288

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure...

CVE-2017-11291

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery SSRF vulnerability exists that could be abused to bypass network access controls...

CVE-2017-11290

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress or Clickjacking vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing or clickjacking attacks...

Cross site scripting

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure...

CVE-2017-11287

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure...

Cross site scripting

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure...

Server side request forgery (ssrf)

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery SSRF vulnerability exists that could be abused to bypass network access controls...

CVE-2017-11290

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress or Clickjacking vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing or clickjacking attacks...

CVE-2017-11287

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure...

CVE-2017-11288

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure...