PT-2025-42204 · Adobe · Connect

Published 2025-10-14 · Updated 2025-10-15 · CVE-2025-49553

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.9 and earlier

Description The software is susceptible to a DOM-based Cross-Site Scripting (XSS) issue. Successful exploitation could allow an attacker to execute malicious scripts in a victim’s browser, potentially leading to session takeover. Exploitation requires user interaction, specifically a victim navigating to a crafted web page. The impact to confidentiality and integrity is considered high.

Recommendations Update to a newer version to prevent exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-49553

Affected Products

Connect

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-49553 · Security Note
• https://osv.dev/vulnerability/CVE-2025-49553 · Vendor Advisory
• https://helpx.adobe.com/security/products/connect/apsb25-70.html · Vendor Advisory
• https://twitter.com/ZeroPathLabs/status/1978232148105609230 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1978381744144330783 · Twitter Post
• https://twitter.com/0dayPublishing/status/1978221582611833241 · Twitter Post
• https://twitter.com/CVEnew/status/1978562121789997149 · Twitter Post
• https://t.me/CVEtracker/34915 · Telegram Post
• https://t.me/cveNotify/138693 · Telegram Post