Adobe

Records8047All Threatist records

Exploited (KEV)83In CISA KEV

CVSS critical1940CVSS 9.0–10.0

CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV

TI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability CRITICAL 98KEV 2026-09-24 TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL 100KEV 2026-09-08 TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability CRITICAL 100KEV 2026-07-07 TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability CRITICAL 97KEV 2026-05-20 TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability CRITICAL 93KEV 2026-04-13

Components

Products in the NVD configurations · select one to filter the records

Acrobat Dc 1832 records CRITICAL Acrobat Reader Dc 1832 records CRITICAL Acrobat 1414 records CRITICAL Experience Manager 1299 records HIGH Acrobat Reader 1085 records CRITICAL Flash Player 1084 records CRITICAL Air 413 records CRITICAL Air Sdk 409 records CRITICAL

Records

16 records in Robohelp · all components

TI-2013-04565 CVE-2013-5327 · GHSA-c795-pfrm-92xw

MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a…

MEDIUM 49

MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03836 Published 2013-10-09 No fix listed CWE-119

TI-2016-00941 CVE-2016-1035 · GHSA-jq86-67wc-vc43

Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to…

LOW 39

Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive information via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03539 Published 2016-04-12 No fix listed CWE-200

TI-2007-01240 CVE-2007-1280 · GHSA-m5pf-frf4-9m2x

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows…

LOW 35

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a # (hash) in the URL path, as demonstrated using en/frameset-…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.13823 Published 2007-05-09 No fix listed

TI-2021-04176 CVE-2021-21070 · GHSA-whpp-mq64-qp2q

Privilege Escalation Vulnerability in Adobe RoboHelp

LOW 34

Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation.

CVSS 3.1MEDIUM 6.5 Local High privileges User interaction EPSS 0.01598 Published 2021-04-19 No fix listed CWE-427

TI-2017-02325 CVE-2017-3105 · GHSA-cp5g-75hv-g477

Open redirect in Adobe RoboHelp RH2017.0.1 and earlier versions

LOW 33

Adobe RoboHelp has an Open Redirect vulnerability.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02886 Published 2017-12-01 No fix listed CWE-601

TI-2016-06635 CVE-2016-7891 · GHSA-3h97-vcg5-xxqv

Cross-site scripting in Adobe RoboHelp 2015.0.3 and earlier, RoboHelp 11 and earlier

LOW 33

Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attacks.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.032 Published 2016-12-15 No fix listed CWE-79

TI-2017-02324 CVE-2017-3104 · GHSA-8526-rr9p-cjrw

Cross-site scripting in Adobe RoboHelp RH2017.0.1 and earlier versions

LOW 32

Adobe RoboHelp has a cross-site scripting (XSS) vulnerability.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0279 Published 2017-12-01 No fix listed CWE-79

TI-2008-00610 CVE-2008-0642 · GHSA-hwc8-3mcr-2wjf

Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7…

LOW 30

Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire (WildFireExt) extension, allows remote attackers to inject arbit…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01281 Published 2008-02-15 No fix listed CWE-79

TI-2022-07353 CVE-2022-23201 · GHSA-9468-6vrh-r29c

Adobe RoboHelp Reflected XSS could lead to Arbitrary code execution

LOW 28

Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00697 Published 2022-07-15 No fix listed CWE-79

TI-2012-00704 CVE-2012-0765 · GHSA-rpfv-8h77-x742

Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 8 and 9 for Word…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 8 and 9 for Word allow remote attackers to inject arbitrary web script or HTML via a crafted URL, related to certain .htm files in (1) template_stock…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02549 Published 2012-02-15 No fix listed CWE-79

TI-2011-01856 CVE-2011-2133 · GHSA-57x9-jvfm-mcj4

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and…

LOW 25

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and 9, allows remote attackers to inject arbitrary web script or HTML via the URI, related to template_stock/whut…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02985 Published 2011-08-11 No fix listed CWE-79

TI-2011-00536 CVE-2011-0613 · GHSA-gpqc-gm4j-fpmh

Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to (1) wf_status.htm an…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01732 Published 2011-05-16 No fix listed CWE-79

TI-2010-02762 CVE-2010-2886 · GHSA-w8cx-6c92-33w2

Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 7 and 8, and…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01757 Published 2010-10-26 No fix listed CWE-79

TI-2009-00504 CVE-2009-0524 · GHSA-j6h2-22f6-hhf6

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6…

LOW 24

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attackers to inject arbitrary web script or HTML via vectors involving files produced by RoboHelp.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02146 Published 2009-02-26 No fix listed CWE-79

TI-2009-00503 CVE-2009-0523 · GHSA-whp8-h58w-r9jr

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled when displaying the Help Errors lo…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02078 Published 2009-02-26 No fix listed CWE-79

TI-2010-02761 CVE-2010-2885 · GHSA-pcp2-f58f-rq5f

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7…

LOW 23

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generation with RoboHelp for…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01702 Published 2010-10-26 No fix listed CWE-79

Open these records in search →

Critical	1940
High	3102
Medium	2864
Low	140
No CVSS	1