CVE-2021-21080mediumCWE-79

CVE-2021-21080: medium-severity vulnerability in Adobe Connect

Adobe Connect Reflected Cross-site Scripting via query parameter

Published · Updated

Follow this CVE+ Monitor Adobe Connect

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 1.2%
Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Adobe · Connect
Related CVEs — Adobe Connect

In the same product, most dangerous first.

CVE-2023-22232MEDIUMAdobe Connect Improper Access Control Security feature bypassEPSS 83.4%CVE-2021-21085HIGHAdobe Connect CSV injection via export feature could lead to code executionEPSS 3.9%CVE-2021-40719CRITICALAdobe Connect Deserialization of Untrusted Data Remote Code ExecutionEPSS 3.5%CVE-2021-36061MEDIUMAdobe Connect Violation of Secure Design Principles Vulnerability Can Lead To Editing Or Deleting RecordingsEPSS 1.6%CVE-2020-24443MEDIUMReflected Cross-Site Scripting (XSS) in Adobe ConnectEPSS 1.5%CVE-2020-24442MEDIUMReflected Cross-Site Scripting (XSS) in Adobe ConnectEPSS 1.5%