Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:connect:*:*:*:*:*:-:*:*
part: a version: * update: *
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Connect (1badc143-1521-5c96-93f2-5d25096386a5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | - |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-34617 |
vulnerable | 2026-06-08 07:59:12.773884 |
Adobe Connect | Cross-site Scripting (XSS) (CWE-79)
HIGH (8.7)
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Published: 2026-04-14T17:33:49.511Z
Updated: 2026-04-14T19:10:24.817Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34615 |
vulnerable | 2026-06-08 07:59:12.773107 |
Adobe Connect | Deserialization of Untrusted Data (CWE-502)
CRITICAL (9.3)
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Published: 2026-04-14T17:33:44.131Z
Updated: 2026-04-28T02:24:43.589Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34614 |
vulnerable | 2026-06-08 07:59:12.770390 |
Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
MEDIUM (6.1)
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.
Published: 2026-04-14T17:33:46.943Z
Updated: 2026-04-14T19:18:31.682Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27303 |
vulnerable | 2026-06-08 07:53:22.181916 |
Adobe Connect | Deserialization of Untrusted Data (CWE-502)
CRITICAL (9.6)
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Published: 2026-04-14T17:33:50.425Z
Updated: 2026-04-28T02:24:34.780Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27246 |
vulnerable | 2026-06-08 07:53:22.093148 |
Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
CRITICAL (9.3)
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Published: 2026-04-14T17:33:47.834Z
Updated: 2026-04-28T02:24:25.586Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27245 |
vulnerable | 2026-06-08 07:53:22.092380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27243 |
vulnerable | 2026-06-08 07:53:22.089439 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21331 |
vulnerable | 2026-06-08 07:49:15.436839 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54196 |
vulnerable | 2026-06-08 07:33:11.754804 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49553 |
vulnerable | 2026-06-08 07:29:13.607497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49552 |
vulnerable | 2026-06-08 07:29:13.606746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.