Vulnerability Details CVE-2016-7851
Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.092
EPSS Ranking 92.4%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2016-7851
-
cpe:2.3:a:adobe:connect:-
-
cpe:2.3:a:adobe:connect:1.0.0.1
-
cpe:2.3:a:adobe:connect:6.0
-
cpe:2.3:a:adobe:connect:6.1
-
cpe:2.3:a:adobe:connect:6.2
-
cpe:2.3:a:adobe:connect:6.3
-
cpe:2.3:a:adobe:connect:7.0
-
cpe:2.3:a:adobe:connect:7.2
-
cpe:2.3:a:adobe:connect:7.3
-
cpe:2.3:a:adobe:connect:7.5
-
cpe:2.3:a:adobe:connect:8.0
-
cpe:2.3:a:adobe:connect:8.1
-
cpe:2.3:a:adobe:connect:8.2
-
cpe:2.3:a:adobe:connect:8.2.1
-
cpe:2.3:a:adobe:connect:8.2.2
-
cpe:2.3:a:adobe:connect:9.0
-
cpe:2.3:a:adobe:connect:9.0.2
-
cpe:2.3:a:adobe:connect:9.0.3
-
cpe:2.3:a:adobe:connect:9.1
-
cpe:2.3:a:adobe:connect:9.1.2
-
cpe:2.3:a:adobe:connect:9.2
-
cpe:2.3:a:adobe:connect:9.3
-
cpe:2.3:a:adobe:connect:9.4.1
-
cpe:2.3:a:adobe:connect:9.4.2
-
cpe:2.3:a:adobe:connect:9.5
-
cpe:2.3:a:adobe:connect:9.5.2
-
cpe:2.3:a:adobe:connect:9.5.3
-
cpe:2.3:a:adobe:connect:9.5.4
-
cpe:2.3:a:adobe:connect:9.5.5
-
cpe:2.3:a:adobe:connect:9.5.6