CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 18/01/2019 |
| CVE-2018-12805 | CRITICAL9.8 | Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability. Successful exploitation could lead to privilege escalation. | 20/07/2018 |
| CVE-2018-12804 | CRITICAL9.8 | Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking. | 20/07/2018 |
| CVE-2018-4994 | HIGH7.5 | Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability. Successful exploitation could lead to sensitive information disclosure. | 19/05/2018 |
| CVE-2018-4923 | CRITICAL9.1 | Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection. Successful exploitation could lead to arbitrary file deletion. | 19/05/2018 |
| CVE-2018-4921 | MEDIUM6.1 | Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability. Successful exploitation could lead to information disclosure. | 19/05/2018 |
| CVE-2017-11291 | CRITICAL10.0 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls. | 09/12/2017 |
| CVE-2017-11290 | MEDIUM6.1 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or Clickjacking) vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing (or clickjacking) attacks. | 09/12/2017 |
| CVE-2017-11289 | MEDIUM6.1 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure. | 09/12/2017 |
| CVE-2017-11288 | MEDIUM6.1 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure. | 09/12/2017 |
| CVE-2017-11287 | MEDIUM6.1 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure. | 09/12/2017 |
| CVE-2017-3103 | MEDIUM6.1 | Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to a stored cross-site scripting attack. | 17/07/2017 |
| CVE-2017-3102 | MEDIUM6.1 | Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross-site scripting attack. | 17/07/2017 |
| CVE-2017-3101 | HIGH7.5 | Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack. | 17/07/2017 |
| CVE-2016-7851 | MEDIUM6.1 | Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks. | 08/11/2016 |
| CVE-2016-4118 | HIGH7.8 | Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors. | 30/05/2016 |
| CVE-2016-0950 | MEDIUM5.3 | Adobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified vectors. | 10/02/2016 |
| CVE-2016-0949 | CRITICAL9.8 | Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL. | 10/02/2016 |