Adobe Connect version 11.2.3 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/connect/apsb21-91.html | Patch Release Notes Vendor Advisory |
Configurations
History
30 Nov 2021, 20:19
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 6.1 |
16 Nov 2021, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Adobe Connect version 11.2.3 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. |
21 Oct 2021, 19:42
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:* | |
| References | (MISC) https://helpx.adobe.com/security/products/connect/apsb21-91.html - Patch, Release Notes, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 5.4 |
15 Oct 2021, 15:31
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-10-15 15:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-40721
Mitre link : CVE-2021-40721
CVE.ORG link : CVE-2021-40721
JSON object : View
Products Affected
adobe
- connect
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')