185 matches found
Adobe Releases Security Updates for Multiple Products
Adobe has released security updates to address vulnerabilities affecting multiple Adobe products. A cyber threat actor could exploit some of these vulnerabilities to take control of affected system. CISA encourages users and administrators to review the following advisories and apply the necessar...
CVE-2022-23201
Adobe RoboHelp versions 2020.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...
CVE-2022-23201
Adobe RoboHelp versions 2020.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...
Cross site scripting
Adobe RoboHelp versions 2020.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...
CVE-2022-23201 Adobe RoboHelp Reflected XSS could lead to Arbitrary code execution
Adobe RoboHelp versions 2020.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...
CVE-2022-23201: Improper Neutralization of Input During Web Page Generation
Adobe RoboHelp versions 2020.0.7 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...
Adobe RoboHelp Cross-Site Scripting Vulnerability (CNVD-2022-60077)
Adobe RoboHelp is a help authoring tool developed and released for Windows by the American company Audobee Adobe. A cross-site scripting vulnerability exists in Adobe RoboHelp version 2020.0.7 and earlier, which stems from the program's lack of checksum filtering of user-supplied data and output...
Adobe RoboHelp 2020 < RH2020.0.8 XSS (APSB22-10)
The version of Adobe RoboHelp installed on the remote host is 2020 prior to RH2020.0.8. It is, therefore, affected by a cross-site scripting XSS vulnerability. An unauthenticated, remote attacker can exploit this to execute arbitrary script code. Note that Nessus has not tested for this issue but...
PT-2022-3679 · Adobe · Robohelp
Name of the Vulnerable Software and Affected Versions: Adobe RoboHelp versions 2020.0.7 and earlier Description: The issue is related to a reflected Cross-Site Scripting XSS vulnerability. If an attacker convinces a victim to visit a URL referencing a vulnerable page, malicious JavaScript content...
Adobe RoboHelp 跨站脚本漏洞
Adobe RoboHelp is a help authoring tool developed and released for Windows by the American company Audobee Adobe. A cross-site scripting vulnerability exists in Adobe RoboHelp version 2020.0.7 and earlier, which stems from the program's lack of checksum filtering of user-supplied data and output...
The vulnerability of server-based corporate software for monitoring and managing project knowledge bases in Adobe RoboHelp Server stems from deficiencies in the authentication process, allowing unauthorized users to escalate their privileges.
The vulnerability of server-based corporate software for project monitoring and management in Adobe RoboHelp Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...
Adobe RoboHelp 授权问题漏洞
Adobe RoboHelp is a help authoring tool developed and distributed for Windows by Adobe. An authorization issue vulnerability exists in Adobe RoboHelp and Adobe RoboHelp Server 11 Update 3 and earlier versions, which stems from a vulnerability that allows a user with non-administrative privileges ...
The vulnerability of server-based corporate software for monitoring and managing project knowledge bases in Adobe RoboHelp Server lies in its ability to load files beyond the expected directory limits, allowing attackers to execute arbitrary code.
The vulnerability of server-based corporate software for project monitoring and management in Adobe RoboHelp Server relates to the ability to load arbitrary files beyond the expected directory structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the...
Adobe RoboHelp Server < 2020.0.2 Arbitrary Code Execution (APSB21-87)
The version of Adobe RoboHelp Server installed on the remote host is affected an arbitrary code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands on an affected system. Note that Nessus has not tested for this iss...
Adobe RoboHelp Server Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe RoboHelp Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the RoboHelp server. When parsing the fileName parameter, the process does not properl...
Adobe RoboHelp Server Path Traversal Vulnerability (CNVD-2021-94145)
Adobe RoboHelp Server is a server-based application for FrameMaker and RoboHelp enterprise users. a path traversal vulnerability exists in Adobe RoboHelp Server RHS2020.0.1 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...
CVE-2021-28588
Adobe RoboHelp Server version 2019.0.9 and earlier is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
CVE-2021-28588: Improper Limitation of a Pathname to a Restricted Directory
Adobe RoboHelp Server version 2019.0.9 and earlier is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
Adobe RoboHelp Server folderId Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe RoboHelp Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the RoboHelp server...
Adobe RoboHelp Server Path Traversal Vulnerability
Adobe RoboHelp Server is a server-based application for FrameMaker and RoboHelp enterprise users. A path traversal vulnerability exists in Adobe RoboHelp Server 2019.0.9 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...