Adobe Connect any version

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls.

Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL.

Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking.

Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability. Successful exploitation could lead to privilege escalation.

Adobe Connect Deserialization of Untrusted Data Remote Code Execution

RCE in Saphira Connect

SQLi in Saphira Connect

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Adobe Connect | Improper Input Validation (CWE-20)

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection. Successful exploitation could lead to arbitrary file deletion.

Cross-site request forgery (CSRF) vulnerability in Adobe Connect before 9.5.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Privilage Escalation in Saphira Connect

Privilage Escalation in Saphira Connect

Adobe Connect | Cross-site Scripting (XSS) (CWE-79)

Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Connect CSV injection via export feature could lead to code execution

Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors.

Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability. Successful exploitation could lead to sensitive information disclosure.

Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack.

Adobe Connect | Improper Certificate Validation (CWE-295)

Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks.

Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability. Successful exploitation could lead to information disclosure.

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or Clickjacking) vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing (or clickjacking) attacks.

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.