Lucene search

K
cve[email protected]CVE-2010-2885
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-2885

2022-10-0316:21:07
CWE-79
web.nvd.nist.gov
20
cve
2010
2885
cross-site scripting
xss
adobe
robohelp
robohelp server
webhelp

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.3%

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generation with RoboHelp for Word.

Affected configurations

NVD
Node
adoberobohelpMatch7
OR
adoberobohelpMatch8
OR
adoberobohelp_serverMatch7
OR
adoberobohelp_serverMatch8

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.3%

Related for CVE-2010-2885