CVE-2024-54036

Summary

CVE-2024-54036 is a stored Cross-Site Scripting (XSS) vulnerability affecting Adobe Connect versions 12.6 and 11.4.7 and older. This issue allows attackers to inject malicious scripts into vulnerable form fields. If a user visits a page containing the exploited field, their browser may execute the malicious JavaScript, potentially compromising their security. The vulnerability could lead to information disclosure, unauthorized account access, or other malicious actions. Users are advised to update their Adobe Connect installations to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.