Live threat intelligence radar

Adobe Connect contains an SQL Injection vulnerability (CWE-89) that allows attackers to execute arbitrary SQL commands without user interaction. This flaw can lead to arbitrary code execution and compromise the confidentiality, integrity, and availability of the application. The vulnerability affects versions up to and including 12.12. It has a critical severity with a CVSS score of 9.4. No patch information is currently provided.

Adobe Connect contains a SQL Injection vulnerability (CWE-89) that allows a low-privileged attacker to execute arbitrary SQL commands without user interaction. This flaw could lead to arbitrary code execution in the context of the current user. The vulnerability affects multiple versions up to and including 12.12. It has a high severity rating with a CVSS score of 8.3.

Adobe Connect contains an SQL Injection vulnerability (CWE-89) that allows a low-privileged attacker to execute arbitrary code without user interaction. The vulnerability affects multiple versions up to 12.12 and can lead to full compromise of confidentiality, integrity, and availability. The vulnerability changes the security scope and has a critical severity rating with a CVSS score of 9.9.

Adobe Connect contains a critical SQL Injection vulnerability (CWE-89) that allows a low-privileged attacker to execute arbitrary code without user interaction. The vulnerability affects multiple versions up to 12.12 and can lead to full compromise of confidentiality, integrity, and availability in the context of the current user.

Adobe Connect contains an SQL Injection vulnerability (CWE-89) that allows a low-privileged attacker to execute arbitrary SQL commands without user interaction. This can lead to arbitrary code execution in the context of the current user and potentially elevate access or control over victim accounts or sessions. The vulnerability affects multiple versions up to 12.12 and has a critical severity rating with a CVSS score of 9.9.

Adobe Connect contains a critical code injection vulnerability (CWE-94) that allows a low-privileged attacker to execute arbitrary code without user interaction. The vulnerability affects multiple versions up to 12.12 and changes the security scope, potentially leading to full compromise of the affected system.

Adobe Connect contains an XML External Entity (XXE) vulnerability (CWE-611) that allows a low-privileged attacker to read arbitrary files on the system without user interaction. This vulnerability affects versions up to and including 12.12. The vulnerability changes the security scope and could expose sensitive file system data.

Adobe Connect contains a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that allows an attacker to escalate privileges without requiring user interaction. The vulnerability affects multiple versions up to and including 12.12. The issue changes the security scope and has a critical severity rating with a CVSS score of 10. No patch information is currently provided.

Adobe Connect contains an Improper Restriction of XML External Entity Reference (XXE) vulnerability (CWE-611) that allows a low-privileged attacker to execute arbitrary code without user interaction. The vulnerability affects versions up to and including 12.12. The flaw changes the security scope and can lead to full compromise of confidentiality, integrity, and availability of the affected system.

Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.