PT-2016-7398 · Adobe · Connect

Benjamin Kunz Mejri · Published 2016-11-08 · Updated 2017-09-03 · CVE-2016-7851

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 9.5.6 and earlier

Description The issue arises from inadequate input validation in the events registration module, which could be exploited in cross-site scripting attacks.

Recommendations For Adobe Connect versions 9.5.6 and earlier, update to a version that addresses the input validation issue in the events registration module.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-7851

Affected Products

Connect

References · 6

• 🔥 https://exploit-db.com/exploits/40742 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-7851 · Security Note
• https://osv.dev/vulnerability/CVE-2016-7851 · Vendor Advisory
• https://helpx.adobe.com/security/products/connect/apsb16-35.html · Vendor Advisory
• http://securityfocus.com/bid/94152 · Note
• http://securitytracker.com/id/1037239 · Note