CVE-2021-21079: falha de média gravidade em Adobe Connect
Adobe Connect Reflected Cross-site Scripting via archiveOffset parameter
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.1epss 1.1%
Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Adobe · ConnectCVEs relacionadas — Adobe Connect
No mesmo produto, das mais perigosas para as menos.
CVE-2023-22232MEDIUMAdobe Connect Improper Access Control Security feature bypassEPSS 83.4%CVE-2021-21085HIGHAdobe Connect CSV injection via export feature could lead to code executionEPSS 3.9%CVE-2021-40719CRITICALAdobe Connect Deserialization of Untrusted Data Remote Code ExecutionEPSS 3.5%CVE-2021-36061MEDIUMAdobe Connect Violation of Secure Design Principles Vulnerability Can Lead To Editing Or Deleting RecordingsEPSS 1.6%CVE-2020-24443MEDIUMReflected Cross-Site Scripting (XSS) in Adobe ConnectEPSS 1.5%CVE-2020-24442MEDIUMReflected Cross-Site Scripting (XSS) in Adobe ConnectEPSS 1.5%