PT-2016-7398 · Adobe · Connect

Benjamin Kunz Mejri · Publicado 2016-11-08 · Atualizado 2017-09-03 · CVE-2016-7851

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 9.5.6 and earlier

Description The issue arises from inadequate input validation in the events registration module, which could be exploited in cross-site scripting attacks.

Recommendations For Adobe Connect versions 9.5.6 and earlier, update to a version that addresses the input validation issue in the events registration module.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-7851

Produtos afetados

Connect

Referências · 6

• 🔥 https://exploit-db.com/exploits/40742 · Exploit
• http://securityfocus.com/bid/94152 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-7851 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-7851 · Aviso do Fabricante
• http://securitytracker.com/id/1037239 · Nota
• https://helpx.adobe.com/security/products/connect/apsb16-35.html · Aviso do Fabricante