Known vulnerabilities in Adobe Connect - page 4

Vendor: Adobe
Software: Adobe Connect
Software CPE: cpe:2.3:a:adobe:adobe_connect:*:*:*:*:*:*:*:*
Total vulnerabilities: 71
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Adobe Connect Adobe Connect is affected by 71 known vulnerabilities: 7 high, 38 medium, 26 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58993 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-0343
CWE-79 Medium
No
No
9.4 15.12.2021 SB2015061301
#VU58992 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-0344
CWE-79 Medium
No
No
9.4 15.12.2021 SB2015061301
#VU11065 - Unrestricted Upload of File with Dangerous Type
CVE-2018-4921
CWE-434 Low
No
No
- 13.03.2018 SB2018031333
#VU9194 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2017-11290
CWE-451 Low
No
No
- 14.11.2017 SB2017111406
#VU9193 - Server-Side Request Forgery (SSRF)
CVE-2017-11291
CWE-918 High
No
No
- 14.11.2017 SB2017111406
#VU9192 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11289
CWE-79 Low
No
No
- 14.11.2017 SB2017111406
#VU9191 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11288
CWE-79 Low
No
No
- 14.11.2017 SB2017111406
#VU9190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11287
CWE-79 Low
No
No
- 14.11.2017 SB2017111406
#VU7398 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2017-3101
CWE-451 Low
No
No
- 11.07.2017 SB2017071103
#VU7397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3103
CWE-79 Low
No
No
- 11.07.2017 SB2017071103
#VU7396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3102
CWE-79 Low
No
No
- 11.07.2017 SB2017071103


Showing elements 61 - 80 out of 71