Skip to content
OpenAdvisories
High WID-SEC-2025-2294 3 CVEs

Adobe Connect: Mehrere Schwachstellen

Published Oct 14, 2025 · Updated Oct 14, 2025 · de-DE

Vendor: Adobe Product: Connect Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Adobe Connect ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.

Product

Adobe Connect ist eine Software zur Erstellung von Informationen, Präsentationen, Online-Schulungsunterlagen, Webkonferenzen, Lernmodulen und für Benutzer-Desktop-Sharing.

Vulnerabilities 3

  • Critical 9.3
    CVE-2025-49553

    Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute malicious scripts in a victim's browser. Exploitation of this issue requires user interaction in tha…

    Adobe Adobe Connect
  • High 8.1
    CVE-2025-49552

    Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a high-privileged attacker to execute malicious scripts in a victim's browser. Exploitation of this issue requires user int…

    Adobe Adobe Connect
  • Medium 4.3
    CVE-2025-54196

    Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)

    Adobe Connect versions 12.9 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user intera…

    Adobe Adobe Connect

Revision history

  1. #1

    Initiale Fassung

References