CVE-2021-21079

Adobe Connect Reflected Cross-site Scripting via archiveOffset parameter

State: Published
Severity: 6.1 Medium
Published: Mar 12, 2021
Updated: Apr 23, 2025
Reserved: Dec 18, 2020

Description

Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field.

Scores

CVSS	Score	Vector	Source
3.0	6.1 Medium	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	adobe

Weaknesses

CWE-79 Cross-site Scripting (Reflected XSS) (CWE-79)

Affected Products

Product	Versions
ConnectAdobe	11.0.7 and earlierAffected None and earlierAffected

References

https://helpx.adobe.com/security/products/connect/apsb21-19.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.