PT-2025-21043 · Adobe · Connect

Published 2025-05-13 · Updated 2025-05-14 · CVE-2025-30316

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 12.8 and earlier

Description: A stored Cross-Site Scripting (XSS) issue affects Adobe Connect, allowing a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim browses to the page containing the vulnerable field, malicious JavaScript may be executed in their browser.

Recommendations: For Adobe Connect versions 12.8 and earlier, consider disabling the vulnerable form fields until a patch is available to prevent the injection of malicious scripts. Restrict access to sensitive pages that may contain the vulnerable fields to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-05702

CVE-2025-30316

Affected Products

Connect

References · 7

• https://helpx.adobe.com/security/products/connect/apsb25-36.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30316 · Security Note
• https://osv.dev/vulnerability/CVE-2025-30316 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05702 · Security Note
• https://t.me/cvetracker/23777 · Telegram Post
• https://twitter.com/CVEnew/status/1922502481541488831 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1922526154155598334 · Twitter Post