Read the docs

Adobe

Records8047All Threatist records
Exploited (KEV)83In CISA KEV
CVSS critical1940CVSS 9.0–10.0
CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV
TI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability Priority CRITICAL 98KEV 2026-09-24TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Priority CRITICAL 100KEV 2026-09-08TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-07-07TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-05-20TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability Priority CRITICAL 93KEV 2026-04-13

Components

Products in the NVD configurations · select one to filter the records
Acrobat Dc 1832 records CRITICAL Acrobat Reader Dc 1832 records CRITICAL Acrobat 1414 records CRITICAL Experience Manager 1299 records HIGH Acrobat Reader 1085 records CRITICAL Flash Player 1084 records CRITICAL Air 413 records CRITICAL Air Sdk 409 records CRITICAL

Records

17 records in Robohelp Server · all components

TI-2009-02923 CVE-2009-3068 · GHSA-ff43-6vf9-7633

Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in…

Priority HIGH 80

Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp) file during a PUBLISH…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.78177 Published 2009-09-04 No fix listed CWE-264
TI-2021-18937 CVE-2021-42727 · GHSA-38rp-v36c-g6c3

Adobe Bridge Buffer Overflow Arbitrary code execution

Priority MEDIUM 61

Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.39401 Published 2021-11-22 No fix listed CWE-787
TI-2023-08543 CVE-2023-22275 · GHSA-4r79-wc6j-9275

ZDI-CAN-21306: Adobe RoboHelp Server GetNewUserId SQL Injection Information Disclosure Vulnerability

Priority MEDIUM 42

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an unauth…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01341 Published 2023-11-17 No fix listed CWE-89
TI-2023-08542 CVE-2023-22274 · GHSA-3hmg-cm34-vrf6

XML external entity injection in Adobe RoboHelp

Priority MEDIUM 42

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to information disclosure by an unauthenticated attacker.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01458 Published 2023-11-17 No fix listed CWE-611
TI-2022-12806 CVE-2022-30670 · GHSA-w7w4-2cm6-989v

Escalate Privileges to Server Admin - Robohelp Server

Priority MEDIUM 41

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01509 Published 2022-06-16 No fix listed CWE-285
TI-2023-08541 CVE-2023-22273 · GHSA-h45c-h5q4-xh2p

ZDI-CAN-21307: Adobe RoboHelp Server OnPublishFile Directory Traversal Remote Code Execution Vulnerability

Priority LOW 37

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to Remote Code Execution by an admin authent…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01937 Published 2023-11-17 No fix listed CWE-22
TI-2023-08537 CVE-2023-22268 · GHSA-ch3p-vmmr-63xx

ZDI-CAN-21308: Adobe RoboHelp Server getRHSGroupsForRoles SQL Injection Information Disclosure Vulnerability

Priority LOW 31

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an low-pr…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01206 Published 2023-11-17 No fix listed CWE-89
TI-2011-01856 CVE-2011-2133 · GHSA-57x9-jvfm-mcj4

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and…

Priority LOW 25

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and 9, allows remote attackers to inject arbitrary web script or HTML via the URI, related to template_stock/whut…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02985 Published 2011-08-11 No fix listed CWE-79
TI-2010-02761 CVE-2010-2885 · GHSA-pcp2-f58f-rq5f

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generation with RoboHelp for…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01702 Published 2010-10-26 No fix listed CWE-79
Open these records in search →