CVE-2021-21079CWE-79

Adobe Connect Reflected Cross-site Scripting via archiveOffset parameter

Medium · published March 12, 2021

CVSS v3.0
6.1
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field.

The record
Technical detail
CVSS v3.0
6.1 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01122 · 65.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-03-12T18:09Z
EPSS history
Timeline
  • 12 MAR 18:09Z
    Adobe Connect Reflected Cross-site Scripting via archiveOffset parameter
    cvelistv5