# Adobe Connect


- [CVE-2017-11291](https://insights.sbomify.com/CVE-2017-11291/): Server-side request forgery in Adobe Connect 9.6.2 and earlier versions (critical 10.0)
- [CVE-2026-75682](https://insights.sbomify.com/CVE-2026-75682/): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (critical 9.9)
- [CVE-2023-4661](https://insights.sbomify.com/CVE-2023-4661/): SQLi in Saphira Connect (critical 9.8)
- [CVE-2023-4662](https://insights.sbomify.com/CVE-2023-4662/): RCE in Saphira Connect (critical 9.8)
- [CVE-2021-40719](https://insights.sbomify.com/CVE-2021-40719/): Adobe Connect Deserialization of Untrusted Data Remote Code Execution (critical 9.8)
- [CVE-2018-12804](https://insights.sbomify.com/CVE-2018-12804/): Auth bypass in Adobe Connect 9.7.5 and earlier (critical 9.8)
- [CVE-2018-12805](https://insights.sbomify.com/CVE-2018-12805/): Privilege escalation in Adobe Connect 9.7.5 and earlier (critical 9.8)
- [CVE-2016-0949](https://insights.sbomify.com/CVE-2016-0949/): Other in n/a (critical 9.8)
- [CVE-2026-27303](https://insights.sbomify.com/CVE-2026-27303/): Adobe Connect | Deserialization of Untrusted Data (CWE-502) (critical 9.6)
- [CVE-2026-75684](https://insights.sbomify.com/CVE-2026-75684/): Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) (critical 9.3)
- [CVE-2026-75686](https://insights.sbomify.com/CVE-2026-75686/): Adobe Connect | Improper Input Validation (CWE-20) (critical 9.3)
- [CVE-2026-75689](https://insights.sbomify.com/CVE-2026-75689/): Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/products/adobe/connect/