CVE-2025-30314

CVE-2025-30314 (Adobe Connect) affects Adobe Connect versions 12.8 and earlier due to a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows an attacker to inject malicious scripts, which may execute in a victim’s browser when they load the page c...

CVE-2018-19718

Adobe Connect 9.8.1 and earlier are affected by CVE-2018-19718, a session token exposure vulnerability that could lead to exposure of the privileges granted to a session. Affected product: Adobe Connect (versions 9.8.1 and earlier). Root cause: session token exposure. Impact: potential leakage of...

CVE-2023-4665

CVE-2023-4665 describes an Incorrect Execution-Assigned Permissions vulnerability in Saphira Connect (pre-9.x), enabling Privilege Escalation due to permission misconfigurations. Affected product is stated as Saphira Connect; the vulnerability affects versions before 9. The available documents do...

CVE-2020-24442

Adobe Connect 11.0 and earlier are affected by a reflected Cross‑Site Scripting (XSS) vulnerability (CVE-2020-24442). An attacker can lure a user to a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. Affected product/version: Adobe Connec...

CVE-2015-0344

CVE-2015-0344 affects Adobe Connect Web App prior to version 9.4 with a Cross-Site Scripting (XSS) vulnerability allowing remote script/HTML injection via unspecified vectors. Impact: potential data exposure/sessions manipulation as per CVSS 2.0 metrics (I:P). Remediation: upgrade to Adobe Connec...

CVE-2016-0950

Adobe Connect prior to 9.5.2 is vulnerable to user interface spoofing (unspecified vectors). The connected sources confirm this as a vulnerability affecting Adobe Connect’s web interface and point to a security update (APSB16-07) that fixes input validation and content spoofing issues and adds CS...

CVE-2025-30316

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low‑privileged attacker to inject malicious JavaScript and have it executed when a user visits the affected page. Root cause is a stored XSS in input/for...

CVE-2020-24443

Adobe Connect 11.0 and earlier are affected by a reflected cross-site scripting (XSS) vulnerability: an attacker who lures a user to a crafted URL can cause arbitrary JavaScript to run in the user’s browser. The issue stems from a vulnerable page reference and is documented under APSB20-69. Remed...

CVE-2023-4661

CVE-2023-4661 affects Saphira Connect versions prior to 9, due to improper neutralization of certain elements in SQL commands (SQL injection). The vulnerability is characterized as a high-severity, network-exploitable issue with a CVSS v3.1 base score of 9.8 (C:H, I:H, A:H; AV:N, AC:L, PR:N, UI:N...

CVE-2025-30315

Summary: Adobe Connect versions ≤ 12.8 are vulnerable to a stored XSS in vulnerable form fields, allowing injected JavaScript to run in a victim’s browser when visiting the affected page. Impact (as stated): stored XSS with potential for script execution in the user context. Affected components: ...

CVE-2023-4662

CVE-2023-4662 involves an Execution with Unnecessary Privileges vulnerability in Saphira Connect (mobile app for Saphira Connect, Inc.). The issue affects versions prior to 9 and enables a Remote Code Inclusion vulnerability due to insufficient privilege checks. Public sources describe potential ...

CVE-2023-4663

CVE-2023-4663 concerns a reflected XSS vulnerability in Saphira Connect prior to version 9. The issue is caused by improper neutralization of script-related HTML tags in web pages, enabling potential script execution in a user browser when interacting with affected pages. The CVSS data (AV:N/AC:L...

CVE-2023-4664

CVE-2023-4664 affects Saphira Connect prior to version 9. The root cause described across connected sources is incorrect default permissions that enable privilege escalation. Impact is reported as high (confidentiality, integrity, and availability affected) with network attack vector and low atta...

CVE-2025-49553

Summary of CVE-2025-49553 : Adobe Connect versions 12.9 and earlier are affected by a DOM-based XSS vulnerability that can lead to session takeover and leakage of confidential data when a user navigates to a crafted page. Concurrent connected sources confirm exploit code exists publicly on multip...

CVE-2025-49552

Adobe Connect is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability in versions 12.9 and earlier. The issue is caused by improper handling/validation of user input, enabling a high-privileged attacker to execute scripts in a victim’s browser and potentially hijack a session. Exploit...

CVE-2026-27245

Adobe Connect (versions 2025.3, 12.10 and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. The issue allows an attacker to lure a user to a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. The CVSS 3.1 score i...

CVE-2026-27243

Adobe Connect (versions 2025.3, 12.10 and earlier) contains a reflected Cross-Site Scripting (XSS) vulnerability. An attacker can lure a user to a crafted URL referencing a vulnerable page, enabling arbitrary JavaScript execution in the user’s browser with high impact to confidentiality and integ...

CVE-2025-54196

Adobe Connect suffers a URL Redirection to Untrusted Site vulnerability affecting version 12.9 and earlier. The issue allows an attacker to lure a user into opening a crafted link, triggering a redirect to a malicious site. Exploitation requires user interaction, and the underlying exposure is Op...

CVE-2026-34617

Adobe Connect (versions 2025.3, 12.10 and earlier) is affected by a Cross-Site Scripting (XSS) vulnerability that can lead to privilege escalation. The issue allows a low-privileged attacker to inject scripts into a page, potentially gaining elevated access or control over a victim’s account or s...

CVE-2026-21331

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a user is convinced to visit a URL referencing a vulnerable page, malicious JavaScript may execute in the victim’s browser. This is a user-interaction–required, network-based ...

CVE-2026-34614

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a user is convinced to visit a crafted URL referencing a vulnerable page, malicious JavaScript could execute in the victim’s browser. Affected component: Adobe Connect web app...

CVE-2026-34615

Adobe Connect (versions 2025.3, 12.10 and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation does not require user interaction. Root cause: deserialization of untrusted data. Affec...

CVE-2026-27246

CVE-2026-27246 affects Adobe Connect versions 2025.3, 12.10 and earlier. It is a DOM-based Cross-Site Scripting (XSS) vulnerability where an attacker can manipulate the DOM to execute malicious JavaScript in the victim’s browser. Exploitation requires user interaction: the victim must visit a cra...

CVE-2026-27303

Adobe Connect (versions 2025.3, 12.10 and earlier) is affected by a Deserialization of Untrusted Data vulnerability (CVE-2026-27303) that could lead to arbitrary code execution in the context of the current user. Exploitation does not require user interaction. The vulnerability is described as ha...