CVE-2018-4923

2018-05-1917:00:00

adobe

www.cve.org

9.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.2%

JSON

Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection. Successful exploitation could lead to arbitrary file deletion.

CNA Affected

[
  {
    "product": "Adobe Connect 9.7 and earlier",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Adobe Connect 9.7 and earlier"
      }
    ]
  }
]

References

www.securityfocus.com/bid/103391

www.securitytracker.com/id/1040523

helpx.adobe.com/security/products/connect/apsb18-06.html