Skip to content
OpenAdvisories

Product · Adobe

Connect

12 known vulnerabilities.

Connect at a glance

Last 12 months
0
Critical · all time
1
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • High max 10.0
    WID-SEC-2026-4495 24 CVEs

    Adobe Connect: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen in Adobe Connect ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmc…

    Adobe Windows
  • High max 9.6
    WID-SEC-2026-4203 1 CVE

    Adobe Connect: Schwachstelle ermöglicht Codeausführung

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Adobe Connect ausnutzen, um beliebigen Programmcode auszuführen.

    Adobe Windows Android macOS
  • High max 9.9
    NCSC-2026-0391 9 CVEs

    Kwetsbaarheden verholpen in Adobe Connect en Adobe Connect Android Mobile App

    Adobe heeft 9 kwetsbaarheden verholpen in Adobe Connect en de Adobe Connect Android Mobile App. De kwetsbaarheden zijn verholpen in Adobe Connect 12.12 en Adobe Connect Android Mobile App 4.5.

    Adobe
  • High max 9.9
    WID-SEC-2026-3516 9 CVEs

    Adobe Connect: Mehrere Schwachstellen

    Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Adobe Connect ausnutzen, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, um beliebigen Programmcode auszuführen, um Informationen offen…

    Adobe Linux Windows
  • High max 10.0
    WID-SEC-2026-1109 9 CVEs rev. 2

    Adobe Connect: Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Connect ausnutzen, um beliebigen Programmcode auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.

    Adobe Windows macOS
    first Apr 14, 2026
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Medium 5.3
    CVE-2023-22232 Public exploit EPSS 83%

    Adobe Connect Improper Access Control Security feature bypass

    Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature…

    Adobe Connect
  • Critical 9.8
    CVE-2021-40719

    Adobe Connect Deserialization of Untrusted Data Remote Code Execution

    Adobe Connect version 11.2.3 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary method invocation when AMF messages are deserialized on an Adobe Connect server. An attacker can leverage this to execute remote c…

    Adobe Connect
  • Medium 6.1
    CVE-2021-40721

    Adobe Connect Reflected Cross Site Scripting

    Adobe Connect version 11.2.3 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the c…

    Adobe Connect
  • Medium 5.4
    CVE-2021-36063

    Adobe Connect Reflected Cross-site Scripting via 'isTabletDeviceHTML' parameter

    Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser wh…

    Adobe Connect
  • Medium 5.4
    CVE-2021-36061

    Adobe Connect Violation of Secure Design Principles Vulnerability Can Lead To Editing Or Deleting Recordings

    Adobe Connect version 11.2.2 (and earlier) is affected by a secure design principles violation vulnerability via the 'pbMode' parameter. An unauthenticated attacker could leverage this vulnerability to edit or delete recordings on the Connect environment. Exp…

    Adobe Connect
  • Medium 5.4
    CVE-2021-36062

    Adobe Connect Reflected Cross-site Scripting via 'campaign-id' parameter

    Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. If an attacker is able to convince a victim to visit a URL re…

    Adobe Connect
  • Medium 4.3
    CVE-2021-28579

    Adobe Connect improper access control could lead to privilege escalation

    Adobe Connect version 11.2.1 (and earlier) is affected by an Improper access control vulnerability that can lead to the elevation of privileges. An attacker with 'Learner' permissions can leverage this scenario to access the list of event participants.

    Adobe Connect
  • High 7.8
    CVE-2021-21085

    Adobe Connect CSV injection via export feature could lead to code execution

    Adobe Connect version 11.0.7 (and earlier) is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports a…

    Adobe Connect
  • Medium 6.1
    CVE-2021-21080

    Adobe Connect Reflected Cross-site Scripting via query parameter

    Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser…

    Adobe Connect
  • Medium 6.1
    CVE-2021-21079

    Adobe Connect Reflected Cross-site Scripting via archiveOffset parameter

    Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser…

    Adobe Connect
  • Medium 6.1
    CVE-2020-24443

    Reflected Cross-Site Scripting (XSS) in Adobe Connect

    Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the con…

    Adobe Connect
  • Medium 6.1
    CVE-2020-24442

    Reflected Cross-Site Scripting (XSS) in Adobe Connect

    Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the con…

    Adobe Connect