Robohelp@* Security Vulnerabilities and Issues — Robohelp@* CVE List

Lucene search

AdobeRobohelp*

9 matches found

CVE•added 2022/07/15 4:15 p.m.•94 views

CVE-2022-23201

Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

6.1CVSS5.7AI score0.00692EPSS

CVE•added 2017/12/01 8:29 a.m.•67 views

CVE-2017-3104

Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.

6.1CVSS5.9AI score0.0137EPSS

CVE•added 2023/11/17 1:15 p.m.•67 views

CVE-2023-22272

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interaction.

7.5CVSS7.3AI score0.0048EPSS

CVE•added 2023/11/17 1:15 p.m.•67 views

CVE-2023-22275

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interactio...

7.5CVSS7.5AI score0.00548EPSS

CVE•added 2023/11/17 1:15 p.m.•56 views

CVE-2023-22273

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to Remote Code Execution by an admin authenticated attacker. Exploitation of this issue does not require user interaction.

7.2CVSS7.1AI score0.03037EPSS

CVE•added 2021/04/19 1:15 p.m.•55 views

CVE-2021-21070

Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges.

9.3CVSS6.5AI score0.00462EPSS

CVE•added 2023/11/17 1:15 p.m.•54 views

CVE-2023-22274

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interaction.

7.5CVSS7.3AI score0.00293EPSS

CVE•added 2017/12/01 8:29 a.m.•51 views

CVE-2017-3105

Adobe RoboHelp has an Open Redirect vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.

6.1CVSS6.3AI score0.00468EPSS

CVE•added 2016/12/15 6:59 a.m.•38 views

CVE-2016-7891

Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attacks.

6.1CVSS5.9AI score0.00991EPSS