Known vulnerabilities in Adobe Connect - page 3

Vendor: Adobe
Software: Adobe Connect
Software CPE: cpe:2.3:a:adobe:adobe_connect:*:*:*:*:*:*:*:*
Total vulnerabilities: 71
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Adobe Connect Adobe Connect is affected by 71 known vulnerabilities: 7 high, 38 medium, 26 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80643 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29305
CWE-79 Medium
No
No
12.4.1 12.09.2023 SB2023091236
#VU72283 - Improper Access Control
CVE-2023-22232
CWE-284 Medium
Available
No
11.4.6, 12.2 15.02.2023 SB2023021558
#VU58991 - Cross-Site Request Forgery (CSRF)
CVE-2021-43014
CWE-352 Medium
No
No
11.4 15.12.2021 SB2021121527
#VU57374 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-40721
CWE-79 Low
No
No
11.2.3 14.10.2021 SB2021101418
#VU57373 - Deserialization of Untrusted Data
CVE-2021-40719
CWE-502 High
No
No
11.2.3 14.10.2021 SB2021101418
#VU55737 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36063
CWE-79 Low
No
No
11.2.3 10.08.2021 SB2021081042
#VU55736 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36062
CWE-79 Low
No
No
11.2.3 10.08.2021 SB2021081042
#VU55735 - Security Features
CVE-2021-36061
CWE-254 Medium
No
No
11.2.3 10.08.2021 SB2021081042
#VU53931 - Improper Access Control
CVE-2021-28579
CWE-284 Medium
No
No
11.2.2 08.06.2021 SB2021060844
#VU51358 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21079
CWE-79 Medium
No
No
11.2 09.03.2021 SB2021031001
#VU51359 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21080
CWE-79 Medium
No
No
11.2 09.03.2021 SB2021031001
#VU51360 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21081
CWE-79 Medium
No
No
11.2 09.03.2021 SB2021031001
#VU51357 - Improper input validation
CVE-2021-21085
CWE-20 High
No
No
11.2 09.03.2021 SB2021031001
#VU48328 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-24443
CWE-79 Medium
No
No
11.0.5 10.11.2020 SB2020111062
#VU48327 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-24442
CWE-79 Medium
No
No
11.0.5 10.11.2020 SB2020111062
#VU16835 - Permissions, Privileges, and Access Controls
CVE-2018-19718
CWE-264 Low
No
No
10.1 08.01.2019 SB2019010802
#VU13622 - Uncontrolled Search Path Element
CVE-2018-12805
CWE-427 Medium
No
No
9.8.1 10.07.2018 SB2018071002
#VU13621 - Session Fixation
CVE-2018-12804
CWE-384 Low
No
No
9.8.1 10.07.2018 SB2018071002
#VU12445 - Exposure of sensitive information to an unauthorized actor
CVE-2018-4994
CWE-200 Low
No
No
- 08.05.2018 SB2018050805
SB2018071002
#VU11066 - Improper input validation
CVE-2018-4923
CWE-20 Low
No
No
- 13.03.2018 SB2018031333


Showing elements 41 - 60 out of 71