CVE-2021-21080CWE-79

Adobe Connect Reflected Cross-site Scripting via query parameter

Medium · published March 12, 2021

CVSS v3.0
6.1
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field.

The record
Technical detail
CVSS v3.0
6.1 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01185 · 67.6th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-03-12T18:12Z
EPSS history
Timeline
  • 12 MAR 18:12Z
    Adobe Connect Reflected Cross-site Scripting via query parameter
    cvelistv5