Adobe Robohelp Server vulnerabilities

17 CVEs affecting Adobe Robohelp Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-22275, published 2023-11-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-3068, published 2009-09-04. High severity, CVSS 9.3. EPSS: 78.2% chance of exploitation in the next 30 days. Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp)…
CVE-2021-42727, published 2021-11-22. High severity, CVSS 7.8. EPSS: 39.4% chance of exploitation in the next 30 days. Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the…
CVE-2008-2991, published 2008-07-09. Medium severity, CVSS 6.1. EPSS: 16.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Help Errors log.
CVE-2021-28588, published 2021-06-28. High severity, CVSS 8.8. EPSS: 6.2% chance of exploitation in the next 30 days. Adobe RoboHelp Server version 2019.0.9 (and earlier) is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this…
CVE-2007-1280, published 2007-05-10. Medium severity, CVSS 4.3. EPSS: 4.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a # (hash) in the URL path, as…
CVE-2011-2133, published 2011-08-11. Medium severity, CVSS 4.3. EPSS: 3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and 9, allows remote attackers to inject arbitrary web script or HTML via the URI, related…
CVE-2009-0524, published 2009-02-26. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attackers to inject arbitrary web script or HTML via vectors involving files produced by…
CVE-2009-0523, published 2009-02-26. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled when…
CVE-2023-22273, published 2023-11-17. High severity, CVSS 7.2. EPSS: 1.9% chance of exploitation in the next 30 days. Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to Remote Code…
CVE-2010-2886, published 2010-10-26. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Latest

CVE-2023-22275, published 2023-11-17. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information…
CVE-2023-22274, published 2023-11-17. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to information disclosure by an…
CVE-2023-22272, published 2023-11-17. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of…
CVE-2023-22268, published 2023-11-17. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information…
CVE-2022-30670, published 2022-06-16. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this…
CVE-2011-0613, published 2011-05-16. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to…