| CVE-2020-24443 | 中6.1 | Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | 12/11/2020 |
| CVE-2020-24442 | 中6.1 | Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | 12/11/2020 |
| CVE-2018-19718 | 中5.3 | Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability. Successful exploitation could lead to exposure of the privileges granted to a session. | 18/01/2019 |
| CVE-2018-12805 | 緊急9.8 | Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability. Successful exploitation could lead to privilege escalation. | 20/07/2018 |
| CVE-2018-12804 | 緊急9.8 | Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking. | 20/07/2018 |
| CVE-2018-4994 | 高7.5 | Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability. Successful exploitation could lead to sensitive information disclosure. | 19/05/2018 |
| CVE-2018-4923 | 緊急9.1 | Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection. Successful exploitation could lead to arbitrary file deletion. | 19/05/2018 |
| CVE-2018-4921 | 中6.1 | Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability. Successful exploitation could lead to information disclosure. | 19/05/2018 |
| CVE-2017-11291 | 緊急10.0 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls. | 09/12/2017 |
| CVE-2017-11290 | 中6.1 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or Clickjacking) vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing (or clickjacking) attacks. | 09/12/2017 |
| CVE-2017-11289 | 中6.1 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure. | 09/12/2017 |
| CVE-2017-11288 | 中6.1 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure. | 09/12/2017 |
| CVE-2017-11287 | 中6.1 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure. | 09/12/2017 |
| CVE-2017-3103 | 中6.1 | Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to a stored cross-site scripting attack. | 17/07/2017 |
| CVE-2017-3102 | 中6.1 | Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross-site scripting attack. | 17/07/2017 |
| CVE-2017-3101 | 高7.5 | Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack. | 17/07/2017 |
| CVE-2016-7851 | 中6.1 | Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks. | 08/11/2016 |
| CVE-2016-4118 | 高7.8 | Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors. | 30/05/2016 |
| CVE-2016-0950 | 中5.3 | Adobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified vectors. | 10/02/2016 |
| CVE-2016-0949 | 緊急9.8 | Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL. | 10/02/2016 |