PT-2023-7076 · Adobe · Robohelp Server

Name of the Vulnerable Software and Affected Versions: Adobe RoboHelp Server versions 11.4 and earlier Description: The issue is related to an Improper Restriction of XML External Entity Reference 'XXE' vulnerability. This could lead to information disclosure by an unauthenticated attacker...

PT-2023-7077

Name of the Vulnerable Software and Affected Versions Adobe RoboHelp Server versions 11.4 and earlier Description The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This could lead to information disclosure b...

PT-2023-7078 · Adobe · Robohelp Server

Name of the Vulnerable Software and Affected Versions: Adobe RoboHelp Server versions 11.4 and earlier Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This could lead to information disclosure...

PT-2023-7165

Name of the Vulnerable Software and Affected Versions Adobe RoboHelp Server versions 11.4 and earlier Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' that could lead to Remote Code Execution by an admin authenticated attacker...

APSB23-53 : Security update available for Adobe RoboHelp Server

Adobe has released a security update for RoboHelp Server. This update resolves vulnerabilities rated critical and important. Successful exploitation could lead to arbitrary code execution and memory leak in the context of the current user...

Adobe RoboHelp Server Auth Bypass Privilege Escalation

The vulnerability of server-based corporate software for project monitoring and management in Adobe RoboHelp Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

CVE-2022-30670

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require...

CVE-2022-30670

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require...

Authorization

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require...

CVE-2022-30670

Adobe RoboHelp Server are affected in versions earlier than RHS 11 Update 3 by an Improper Authorization vulnerability that can allow an authenticated attacker to escalate to full administrator privileges without user interaction. The issue, documented as CVE-2022-30670, has been addressed by Ado...

CVE-2022-30670 Escalate Privileges to Server Admin - Robohelp Server

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require...

CVE-2022-30670: Improper Authorization

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require...

Adobe RoboHelp Server < 11 Update 3 Privilege Escalation (APSB22-31)

The version of Adobe RoboHelp Server installed on the remote host is affected a privilege escalation vulnerability. An authenticated, remote attacker can exploit this to gain privileges. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Vulnerability fixed in Adobe RoboHelp Server

Adobe has fixed a vulnerability in RoboHelp Server. A malicious party, with prior authentication and user authorization, could potentially exploit the vulnerability to grant themselves elevated privileges. The malicious party can through manipulation of API requests, perform actions that are...

Adobe RoboHelp licensing issue vulnerability

Adobe RoboHelp is a help authoring tool developed and distributed for Windows by Adobe. An authorization issue vulnerability exists in Adobe RoboHelp and Adobe RoboHelp Server 11 Update 3 and earlier versions, which stems from a vulnerability that allows a user with non-administrative privileges ...

CVE-2022-30670

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require...

APSB22-31 : Security hotfix available for RoboHelp Server

Adobe has released a security hotfix for RoboHelp Server 11 Update 3, and prior releases. This hotfix resolves a security vulnerability that allows end users with non-administrative privileges to manipulate API requests and elevate their account privileges to that of a server administrator. This...

PT-2022-2991 · Adobe · Robohelp Server

Name of the Vulnerable Software and Affected Versions: RoboHelp Server versions earlier than 11 Update 3 Description: The issue is related to an Improper Authorization vulnerability, which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve...

Adobe RoboHelp Server Path Traversal

The vulnerability of server-based corporate software for project monitoring and management in Adobe RoboHelp Server relates to the ability to load arbitrary files beyond the expected directory structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the...

Adobe RoboHelp Server < 2020.0.2 Arbitrary Code Execution (APSB21-87)

The version of Adobe RoboHelp Server installed on the remote host is affected an arbitrary code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands on an affected system. Note that Nessus has not tested for this iss...