CVE-2021-40721: Adobe Connect Reflected Cross Site Scripting

Q: What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2021-40721.

Q: What is the severity of CVE-2021-40721?

CVE-2021-40721 has a severity level of medium (6.1).

Q: What software is affected by CVE-2021-40721?

Adobe Connect version 11.2.3 and earlier are affected by CVE-2021-40721.

Q: What is the impact of CVE-2021-40721?

An attacker could exploit CVE-2021-40721 to execute malicious JavaScript within the victim's browser.

Q: How can I fix CVE-2021-40721?

Upgrade to Adobe Connect version 11.2.4 or later to fix CVE-2021-40721.

Published Oct 15, 2021

Updated

Adobe Connect version 11.2.3 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

Affected Software

1 affected component

Adobe Connect>=11.0<=11.2.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Adobe Connect to a version that resolves this vulnerability.
Fixed in 11.2.3

Event History

Oct 15, 2021

CVE Published

via MITRE·02:22 PM

Data Sourced

via MITRE·02:22 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2021-40721.

What is the severity of CVE-2021-40721?