9.4CVSS
En pocas palabras
Esta vulnerabilidad se puede explotar a distancia, a través de la red, sin credenciales, sin que la víctima haga nada. Un ataque exitoso compromete gravemente la confidencialidad y la integridad del sistema.
Descripción texto oficial en inglés
Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially compromising the confidentiality, integrity, and availability of the application. Exploitation of this issue does not require user interaction.