Adobe Robohelp vulnerabilities

16 CVEs affecting Adobe Robohelp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-23201, published 2022-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-1280, published 2007-05-10. Medium severity, CVSS 4.3. EPSS: 4.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a # (hash) in the URL path, as…
CVE-2013-5327, published 2013-10-09. High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days. MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-1035, published 2016-04-12. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive information via unspecified vectors.
CVE-2016-7891, published 2016-12-15. Medium severity, CVSS 6.1. EPSS: 3.2% chance of exploitation in the next 30 days. Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attacks.
CVE-2011-2133, published 2011-08-11. Medium severity, CVSS 4.3. EPSS: 3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and 9, allows remote attackers to inject arbitrary web script or HTML via the URI, related…
CVE-2017-3105, published 2017-12-01. Medium severity, CVSS 6.1. EPSS: 2.9% chance of exploitation in the next 30 days. Adobe RoboHelp has an Open Redirect vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.
CVE-2017-3104, published 2017-12-01. Medium severity, CVSS 6.1. EPSS: 2.8% chance of exploitation in the next 30 days. Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.
CVE-2012-0765, published 2012-02-15. Medium severity, CVSS 4.3. EPSS: 2.5% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 8 and 9 for Word allow remote attackers to inject arbitrary web script or HTML via a crafted URL, related to certain .htm files…
CVE-2009-0524, published 2009-02-26. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attackers to inject arbitrary web script or HTML via vectors involving files produced by…
CVE-2009-0523, published 2009-02-26. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled when…

Latest

CVE-2022-23201, published 2022-07-15. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable…
CVE-2021-21070, published 2021-04-19. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to…
CVE-2011-0613, published 2011-05-16. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to…