CVE-2023-29306

MEDIUM 6.1CVE-2023-29306 · Published 13/09/2023 · updated 17/06/2026

In short

CVE-2023-29306 is a MEDIUM (CVSS 6.1) vulnerability affecting connect (adobe).
Chance of exploitation in the next 30 days (EPSS): 0.46%, higher than 40.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
connect adobe	`≤ 12.3`	No fix yet

Description

Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

References

helpx.adobe.com/security/products/connect/apsb23-33.html · Release Notes

More vulnerabilities in connect

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

connect

adobe

≤ 12.3

No fix yet

More vulnerabilities in connect

See all →