Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Adobe RoboHelp — helpx.adobe.com/security/products/robohelp-server/apsb23-53… Clear all filters
TI-2023-08543 CVE-2023-22275 · GHSA-4r79-wc6j-9275

ZDI-CAN-21306: Adobe RoboHelp Server GetNewUserId SQL Injection Information Disclosure Vulnerability

Priority MEDIUM 42

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an unauth…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01341 Published 2023-11-17 No fix listed CWE-89
TI-2023-08537 CVE-2023-22268 · GHSA-ch3p-vmmr-63xx

ZDI-CAN-21308: Adobe RoboHelp Server getRHSGroupsForRoles SQL Injection Information Disclosure Vulnerability

Priority LOW 31

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an low-pr…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01206 Published 2023-11-17 No fix listed CWE-89
TI-2023-08542 CVE-2023-22274 · GHSA-3hmg-cm34-vrf6

XML external entity injection in Adobe RoboHelp

Priority MEDIUM 42

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to information disclosure by an unauthenticated attacker.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01458 Published 2023-11-17 No fix listed CWE-611
TI-2023-08541 CVE-2023-22273 · GHSA-h45c-h5q4-xh2p

ZDI-CAN-21307: Adobe RoboHelp Server OnPublishFile Directory Traversal Remote Code Execution Vulnerability

Priority LOW 37

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to Remote Code Execution by an admin authent…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01937 Published 2023-11-17 No fix listed CWE-22