Adobe RoboHelp Server < 11 Update 5 Multiple Vulnerabilities (APSB23-53)

The version of Adobe RoboHelp Server installed on the remote host is prior to 11 Update 5. It is, therefore affected by multiple vulnerabilities: - XML external entity XXE vulnerability. CVE-2023-22274 - Information disclosure due to a memory leak. CVE-2023-22272 - Path traversal vulnerability...

Adobe RoboHelp Server getRHSGroupsForRoles SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe RoboHelp Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the getRHSGroupsForRoles method. The issue results from the lack of proper...

Adobe RoboHelp Server UpdateCommandStream XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe RoboHelp Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpdateCommandStream method. Due to the improper restriction of XML...

Adobe RoboHelp Server OnPublishFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe RoboHelp Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the OnPublishFile method. The issue results from the lack of proper validation of a...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities affecting multiple Adobe products. A cyber threat actor could exploit some of these vulnerabilities to take control of affected system. CISA encourages users and administrators to review the following advisories and apply the necessar...

PT-2023-7077

Name of the Vulnerable Software and Affected Versions Adobe RoboHelp Server versions 11.4 and earlier Description The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This could lead to information disclosure b...

PT-2023-7164

Name of the Vulnerable Software and Affected Versions Adobe RoboHelp Server versions 11.4 and earlier Description The issue is related to insufficient input validation in Adobe RoboHelp Server, which can be exploited by a remote attacker to gain access to confidential information. This exploitati...

PT-2023-7165

Name of the Vulnerable Software and Affected Versions Adobe RoboHelp Server versions 11.4 and earlier Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' that could lead to Remote Code Execution by an admin authenticated attacker...

Adobe RoboHelp Server Auth Bypass Privilege Escalation

The vulnerability of server-based corporate software for project monitoring and management in Adobe RoboHelp Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

Adobe RoboHelp Server Path Traversal

The vulnerability of server-based corporate software for project monitoring and management in Adobe RoboHelp Server relates to the ability to load arbitrary files beyond the expected directory structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the...

Adobe RoboHelp Server < 2020.0.2 Arbitrary Code Execution (APSB21-87)

The version of Adobe RoboHelp Server installed on the remote host is affected an arbitrary code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands on an affected system. Note that Nessus has not tested for this iss...

Adobe RoboHelp Server Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe RoboHelp Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the RoboHelp server. When parsing the fileName parameter, the process does not properl...

Adobe RoboHelp Server Path Traversal Vulnerability (CNVD-2021-94145)

Adobe RoboHelp Server is a server-based application for FrameMaker and RoboHelp enterprise users. a path traversal vulnerability exists in Adobe RoboHelp Server RHS2020.0.1 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

PT-2021-5590

Name of the Vulnerable Software and Affected Versions Adobe RoboHelp Server versions 2020.0.1 and earlier Adobe Bridge versions 11.1.1 and earlier Description The issue is related to the possibility of uploading arbitrary files outside of the intended directory, potentially allowing a remote...

CVE-2021-28588

Adobe RoboHelp Server version 2019.0.9 and earlier is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-28588: Improper Limitation of a Pathname to a Restricted Directory

Adobe RoboHelp Server version 2019.0.9 and earlier is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

Adobe RoboHelp Server folderId Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe RoboHelp Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the RoboHelp server...

Adobe RoboHelp Server Path Traversal Vulnerability

Adobe RoboHelp Server is a server-based application for FrameMaker and RoboHelp enterprise users. A path traversal vulnerability exists in Adobe RoboHelp Server 2019.0.9 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

PT-2021-3930

Name of the Vulnerable Software and Affected Versions Adobe RoboHelp Server versions 2019.0.9 and earlier Description The issue exists due to incorrect restriction of the directory path name with limited access. Exploitation may allow a remote attacker to read arbitrary files using a specially...

Adobe RoboHelp 路径遍历漏洞

Adobe RoboHelp Server is a server-based application for FrameMaker and RoboHelp enterprise users. A path traversal vulnerability exists in Adobe RoboHelp Server 2019.0.9 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...