CVE-2024-54049: Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54049?
CVE-2024-54049 has a high severity rating due to its potential for reflected Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2024-54049?
To fix CVE-2024-54049, users should update Adobe Connect to version 11.4.9 or later and 12.7 or later.
Which versions of Adobe Connect are affected by CVE-2024-54049?
CVE-2024-54049 affects Adobe Connect versions 12.6, 11.4.7 and all earlier versions.
What type of vulnerability is CVE-2024-54049?
CVE-2024-54049 is a reflected Cross-Site Scripting (XSS) vulnerability.
Can CVE-2024-54049 be exploited remotely?
Yes, an attacker can exploit CVE-2024-54049 remotely by convincing a victim to visit a malicious URL.