Lucene search

[email protected]CVE-2010-2886

HistoryOct 26, 2010 - 7:00 p.m.

CVE-2010-2886

2010-10-2619:00:00

CWE-79

[email protected]

web.nvd.nist.gov

cve

2010

2886

xss

vulnerabilities

adobe

robohelp

remote attackers

web script

html

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
adobe:robohelpadobe robohelpeq8
adobe:robohelpadobe robohelpeq7
adobe:robohelp_serveradobe robohelp servereq7
adobe:robohelp_serveradobe robohelp servereq8

CPE	Name	Operator	Version
adobe:robohelp	adobe robohelp	eq	8
adobe:robohelp	adobe robohelp	eq	7
adobe:robohelp_server	adobe robohelp server	eq	7
adobe:robohelp_server	adobe robohelp server	eq	8

References

secunia.com/advisories/41870

securitytracker.com/id?1024611

www.adobe.com/support/security/bulletins/apsb10-23.html

www.vupen.com/english/advisories/2010/2718

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.3%

JSON

Related for CVE-2010-2886

cvelist1 prion1