CVE-2024-54040

Summary

CVE-2024-54040 is a stored Cross-Site Scripting (XSS) vulnerability affecting Adobe Connect versions 12.6 and 11.4.7, and potentially earlier releases. This issue allows an attacker to inject malicious scripts into vulnerable form fields. Once executed, these scripts can run in a victim's browser when they access a page containing the affected field, potentially leading to unintended actions or information disclosure. This vulnerability poses a significant risk, particularly in enterprise environments where Adobe Connect is widely used. It is crucial that affected organizations apply the necessary patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.