Adobe Connect contains a code injection vulnerability that allows an attacker with low privileges to execute arbitrary code without user interaction. This vulnerability affects the scope of the application and can lead to full compromise of confidentiality, integrity, and availability.
CAI Content Credentials suffers from an improper verification of cryptographic signatures vulnerability that could allow an attacker to bypass security features and gain unauthorized write access. Exploitation requires user interaction, such as visiting a malicious URL or interacting with a compromised web page. The vulnerability has a medium severity rating with a CVSS score of 5.5.
Adobe Connect contains a critical SQL Injection vulnerability that allows a low-privileged attacker to execute arbitrary code without user interaction. The vulnerability involves improper neutralization of special elements in SQL commands, potentially leading to full compromise in the context of the current user. The scope of impact is changed, indicating possible privilege escalation or broader impact beyond the initial component.
Adobe Connect contains a stored Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to inject malicious JavaScript into vulnerable form fields. When a victim accesses the affected page, the malicious script executes in their browser, potentially enabling the attacker to escalate privileges or take control of the victim's account or session. This vulnerability has a critical severity rating with a high impact on confidentiality and integrity.
CAI Content Credentials suffers from an Improper Certificate Validation vulnerability that allows an attacker to bypass security features and gain unauthorized write access. Exploitation does not require user interaction but depends on conditions outside the attacker's control. The vulnerability has a medium severity rating with a CVSS score of 5.1.
Adobe Connect contains a Server-Side Request Forgery (SSRF) vulnerability identified as CVE-2026-121889. This vulnerability allows an attacker to escalate privileges without requiring any user interaction. The vulnerability affects the security scope, potentially enabling unauthorized access or actions within the system. The CVSS score is 10.0, indicating a critical severity level.
Adobe Connect has an Improper Restriction of XML External Entity Reference (XXE) vulnerability that allows a low-privileged attacker to read arbitrary files on the system. This vulnerability does not require user interaction and changes the security scope, potentially exposing sensitive information.
Adobe Connect contains an Improper Restriction of XML External Entity Reference (XXE) vulnerability that allows a low-privileged attacker to execute arbitrary code without user interaction. The vulnerability affects the scope of the application and can lead to full compromise of confidentiality, integrity, and availability.
Adobe Connect contains a Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-121356) that allows an attacker to escalate privileges without requiring user interaction. The vulnerability affects the server's ability to properly validate or restrict requests, potentially enabling unauthorized internal network access or privilege changes. The vulnerability has a critical CVSS score of 10.0, indicating high impact on confidentiality and integrity with no availability impact. No affected versions or patch information are provided.
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that allows attackers to execute malicious JavaScript in the victim's browser by manipulating the DOM environment. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability impacts confidentiality and integrity with a medium severity rating.
Adobe Experience Manager has a DOM-based Cross-Site Scripting (XSS) vulnerability that allows an attacker to execute malicious JavaScript in the victim's browser by manipulating the DOM environment. Exploitation requires the victim to visit a specially crafted webpage. The vulnerability affects the confidentiality and integrity of data but does not impact availability.
Adobe Connect contains a critical path traversal vulnerability that allows an attacker with limited privileges to read arbitrary files on the file system outside the intended directories. This vulnerability does not require user interaction and affects the security scope, potentially leading to full confidentiality, integrity, and availability compromise.
Adobe Connect has a critical vulnerability classified as Improper Neutralization of CRLF Sequences (CRLF Injection). This flaw could allow an attacker to execute arbitrary code within the context of the current user without requiring any user interaction. The vulnerability has a scope change, indicating that it may affect components beyond the initially vulnerable code. The CVSS score is 10.0, reflecting its critical severity and potential for complete confidentiality and integrity compromise without availability impact.
Adobe Connect suffers from an Incorrect Authorization vulnerability (CVE-2026-121352) that allows an attacker to escalate privileges without user interaction. This vulnerability changes the security scope and could enable unauthorized access to sensitive resources. It is rated critical with a CVSS score of 10. No affected versions or patch information are provided.
Adobe Connect contains an Incorrect Authorization vulnerability (CVE-2026-121355) that allows an attacker to escalate privileges without user interaction. This flaw could enable unauthorized access to sensitive information or functionality within the application. The vulnerability is rated critical with a CVSS score of 9.1, indicating high impact on confidentiality and integrity. No affected versions or patch information are currently provided.
Adobe Connect contains a SQL Injection vulnerability that allows a low-privileged attacker to disclose sensitive memory information without user interaction. The vulnerability changes the security scope and can lead to high confidentiality impact.
Adobe Connect contains a critical path traversal vulnerability that allows an attacker to read arbitrary files on the file system outside the intended directory. This vulnerability requires no user interaction and affects the security scope by enabling unauthorized access to sensitive data.
Adobe Experience Manager suffers from an Incorrect Authorization vulnerability that allows a low-privileged attacker to execute arbitrary code without user interaction. The vulnerability changes the security scope and can lead to full compromise of confidentiality, integrity, and availability. It is rated critical with a CVSS score of 9.9.
Adobe Experience Manager contains a stored Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim visits the affected page, the malicious JavaScript may execute in their browser, potentially compromising confidentiality and integrity. The vulnerability has a medium severity rating with a CVSS score of 5.4.
CAI Content Credentials has an improper input validation vulnerability that can allow an attacker to bypass security features and gain unauthorized write access. Exploitation requires user interaction, such as visiting a malicious URL or interacting with a compromised webpage. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.