DOM-based Cross-Site Scripting Vulnerability in Adobe Connect

CVE-2025-49552

What is CVE-2025-49552?

Adobe Connect versions 12.9 and earlier have a vulnerability that allows a high-privileged attacker to exploit a DOM-based Cross-Site Scripting flaw. This issue could enable the attacker to run malicious scripts in the browser of a victim, contingent upon user interaction. Specifically, victims must visit a specially crafted web page for exploitation to occur. This could lead to session hijacking and potentially compromise confidentiality and integrity.

References