CVE-2025-43567: Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Adobe Connect versions 12.8 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43567?
CVE-2025-43567 has been classified as a medium severity vulnerability due to the potential for reflected Cross-Site Scripting attacks.
How do I fix CVE-2025-43567?
To mitigate CVE-2025-43567, users should update Adobe Connect to version 12.9 or later.
What type of vulnerability is identified by CVE-2025-43567?
CVE-2025-43567 is a reflected Cross-Site Scripting (XSS) vulnerability.
Who is affected by CVE-2025-43567?
Adobe Connect versions 12.8 and earlier are affected by CVE-2025-43567.
What could an attacker do using CVE-2025-43567?
An attacker could use CVE-2025-43567 to inject malicious scripts into form fields, potentially executing JavaScript in a victim's browser.