CVE-2021-36062: falha de média gravidade em Adobe Connect
Adobe Connect Reflected Cross-site Scripting via 'campaign-id' parameter
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 1.4%
Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Produtos afetados
Adobe · ConnectCVEs relacionadas — Adobe Connect
No mesmo produto, das mais perigosas para as menos.
CVE-2023-22232MEDIUMAdobe Connect Improper Access Control Security feature bypassEPSS 83.4%CVE-2021-21085HIGHAdobe Connect CSV injection via export feature could lead to code executionEPSS 3.9%CVE-2021-40719CRITICALAdobe Connect Deserialization of Untrusted Data Remote Code ExecutionEPSS 3.5%CVE-2021-36061MEDIUMAdobe Connect Violation of Secure Design Principles Vulnerability Can Lead To Editing Or Deleting RecordingsEPSS 1.6%CVE-2020-24443MEDIUMReflected Cross-Site Scripting (XSS) in Adobe ConnectEPSS 1.5%CVE-2020-24442MEDIUMReflected Cross-Site Scripting (XSS) in Adobe ConnectEPSS 1.5%