Adobe Connect

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls.

Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL.

Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking.

Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability. Successful exploitation could lead to privilege escalation.

Adobe Connect Deserialization of Untrusted Data Remote Code Execution

RCE in Saphira Connect

SQLi in Saphira Connect

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection. Successful exploitation could lead to arbitrary file deletion.

Cross-site request forgery (CSRF) vulnerability in Adobe Connect before 9.5.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Privilage Escalation in Saphira Connect

Privilage Escalation in Saphira Connect

Adobe Connect | Cross-site Scripting (XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Connect CSV injection via export feature could lead to code execution

Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors.

Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability. Successful exploitation could lead to sensitive information disclosure.

Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack.

Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks.

Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability. Successful exploitation could lead to information disclosure.

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or Clickjacking) vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing (or clickjacking) attacks.

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.

Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to a stored cross-site scripting attack.

Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross-site scripting attack.

Reflected Cross-Site Scripting (XSS) in Adobe Connect

Reflected Cross-Site Scripting (XSS) in Adobe Connect

Adobe Connect Reflected Cross-site Scripting via 'campaign-id' parameter

Adobe Connect Reflected Cross-site Scripting via 'isTabletDeviceHTML' parameter