CVE-2017-11291
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls.
Affects 1 product across 1 vendor.
Attacker causes the server to make HTTP requests to attacker-chosen destinations, potentially reaching internal services.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
This vulnerability was disclosed in 2017. A critical vulnerability affects Adobe systems (CVE-2017-11291). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
BSID: BS-2017-GLOBAL-114728-C • Model: rule-based-v1 • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2017-11291?
What is the CVSS score for CVE-2017-11291?
Is CVE-2017-11291 actively exploited?
How do I remediate CVE-2017-11291?
What systems are affected by CVE-2017-11291?
| CVE ID | CVE-2017-11291 |
|---|---|
| BSID | BS-2017-GLOBAL-114728-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N |
| Published | 2017-12-09 |
| Last Modified | 2026-05-13 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls.
Source: NIST NVD / MITRE CVE Database
Vulnerability details: An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N.
Exploitation Likelihood: LOW
| Vendor | Product | Affected Versions |
|---|---|---|
| Adobe | Connect | ≤ 9.6.2 |
No patch URL on record. Monitor vendor security advisories directly.
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | rule-based-v1 |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | eb3ec2003d5bba214cd3b775bdcaa77845fb7bf5bc3598145cfd2b2e4035b1b8da29e8908837bd029ec2d21a88478003c82473b7cb47488f3fd78454af6dab8a |
Critical Severity - Know Your Exposure
A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →