Adobe Connect Enterprise Server vulnerabilities

4 CVEs affecting Adobe Connect Enterprise Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-6431, published 2008-02-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-6149, published 2008-02-13. High severity, CVSS 10.0. EPSS: 11.8% chance of exploitation in the next 30 days. Multiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allow remote attackers to execute arbitrary code via a Real Time…
CVE-2007-6148, published 2008-02-13. High severity, CVSS 10.0. EPSS: 8.4% chance of exploitation in the next 30 days. Use-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to execute arbitrary code via an…
CVE-2007-6431, published 2008-02-13. High severity, CVSS 10.0. EPSS: 4.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to "take control of the affected system" via unspecified…
CVE-2007-4651, published 2007-09-12. Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Connect Enterprise Server 6 allows remote attackers to read certain pages that are restricted to the administrator via unknown vectors.