Robohelp (Adobe) - vulnerabilities (CVEs)

20 CVEs, 0 in the last 30 days, 53 known versions, newest CVE from 2023-11-17. Vendor: Adobe.

CVEs of Robohelp

CVE-2023-22274 - CVSS 7.5 (high), 2023-11-17: Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead…
CVE-2023-22273 - CVSS 7.2 (high), 2023-11-17: Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…
CVE-2023-22275 - CVSS 7.5 (high), 2023-11-17: Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…
CVE-2023-22268 - CVSS 6.5 (medium), 2023-11-17: Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…
CVE-2023-22272 - CVSS 7.5 (high), 2023-11-17: Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to information disclosure by an…
CVE-2022-23201 - CVSS 6.1 (medium), 2022-07-15: Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a…
CVE-2022-30670 - CVSS 8.8 (high), 2022-06-16: RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An…
CVE-2021-21070 - CVSS 6.5 (medium), 2021-04-19: Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An…
CVE-2017-3105 - CVSS 6.1 (medium), 2017-12-01: Adobe RoboHelp has an Open Redirect vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.
CVE-2017-3104 - CVSS 6.1 (medium), 2017-12-01: Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.
CVE-2016-7891 - CVSS 6.1 (medium), 2016-12-15: Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attacks.
CVE-2016-1035 - CVSS 7.5 (high), 2016-04-12: Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive information via unspecified vectors.
CVE-2013-5327 - CVSS 10 (critical), 2013-10-09: MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2012-0765 - CVSS 4.3 (medium), 2012-02-15: Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 8 and 9 for Word allow remote attackers to inject arbitrary web script or HTML via a…
CVE-2011-2133 - CVSS 4.3 (medium), 2011-08-11: Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and 9, allows remote attackers to inject arbitrary…
CVE-2011-0613 - CVSS 4.3 (medium), 2011-05-16: Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or…
CVE-2010-2885 - CVSS 4.3 (medium), 2010-10-26: Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or…
CVE-2010-2886 - CVSS 4.3 (medium), 2010-10-26: Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web…
CVE-2009-0524 - CVSS 4.3 (medium), 2009-02-26: Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attackers to inject arbitrary web script or…
CVE-2009-0523 - CVSS 4.3 (medium), 2009-02-26: Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL,…
CVE-2008-0642 - CVSS 6.1 (medium), 2008-02-15: Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire…
CVE-2007-1280 - CVSS 4.3 (medium), 2007-05-10: Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after…