CVE-2017-11290

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress or Clickjacking vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing or clickjacking attacks...

CVE-2017-11291

Adobe Connect 9.6.2 and earlier is affected by CVE-2017-11291, a Server-Side Request Forgery (SSRF) vulnerability that could bypass network access controls. The issue is documented across multiple sources: the NVD entry for CVE-2017-11291 (CVSS v3: 10.0, NETWORK, HIGH impact on confidentiality/ i...

CVE-2017-11290

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress or Clickjacking vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing or clickjacking attacks...

CVE-2017-11290

Adobe Connect 9.6.2 and earlier are affected by multiple vulnerabilities described in APSB17-35. The issues include: (1) SSRF bypassing network controls (CVE-2017-11291), (2) reflected XSS vulnerabilities (CVE-2017-11287, CVE-2017-11288, CVE-2017-11289), and (3) a UI redress/clickjacking vulnerab...

CVE-2017-11289

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure...

CVE-2017-11288

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure...

CVE-2017-11288

CVE-2017-11288 is a reflected cross-site scripting vulnerability in Adobe Connect 9.6.2 and earlier. The issue arises from improper handling/filtering of HTML in user-supplied input, enabling information disclosure. The affected software is Adobe Connect; the root cause is input handling leading ...

CVE-2017-11287

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2017-37091)

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect versions 9.6.2 and earlier. The vulnerability occurs because the software fails to properly filter HTML code in user-supplied input before displaying it. A remote user ca...

Adobe Connect Server-Side Request Forgery Vulnerability

Adobe Connect is an online video conferencing software. A server-side request forgery vulnerability exists in Adobe Connect 9.6.2 and earlier versions. A remote user can exploit this vulnerability to bypass network access control by submitting a specially crafted request...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2017-37090)

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect versions 9.6.2 and earlier. The vulnerability occurs because the software fails to properly filter HTML code in user-supplied input before displaying it. A remote user...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2017-37089)

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 9.6.2 and earlier versions. The vulnerability occurs because the software fails to properly filter HTML code in user-supplied input before displaying it. A remote user ca...

Adobe Connect Multiple Vulnerabilities (APSB17-35)

Adobe Connect is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:connect"; ifdescription...

Adobe Connect Clickjacking Vulnerability

Adobe Connect is an online video conferencing software. A clickjacking vulnerability exists in Adobe Connect 9.6.2 and earlier versions. A remote user can exploit the vulnerability to hijack a target user's mouse clicks to act as the target user to perform actions on a website and obtain...

Adobe Connect <= 9.6.2 Multiple Vulnerabilities (APSB17-35)

The version of Adobe Connect installed on the remote host is prior to 9.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb17-35 advisory. - An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery SSRF vulnerability exis...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Flash Player, Photoshop CC, Adobe Connect, DNG Converter, InDesign, Digital Editions, Shockwave Player, and Experience Manager. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affecte...

Adobe Connect v9.6.1 - CSRF Token Web Vulnerability

Document Title: =============== Adobe Connect v9.6.1 - CSRF Token Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2086 Release Date: ============= 2017-08-31 Vulnerability Laboratory ID VL-ID: ==================================== 2086...

CVE-2017-3101

Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack...

CVE-2017-3102

Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross-site scripting attack...

CVE-2017-3103

Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to a stored cross-site scripting attack...