Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Max CVSS
6.1
EPSS Score
0.08%
Published
2022-07-15
Updated
2023-11-15
Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges.
Max CVSS
9.3
EPSS Score
0.06%
Published
2021-04-19
Updated
2021-06-28
Adobe RoboHelp has an Open Redirect vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.
Max CVSS
6.1
EPSS Score
0.27%
Published
2017-12-01
Updated
2017-12-14
Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.
Max CVSS
6.1
EPSS Score
0.17%
Published
2017-12-01
Updated
2017-12-14
Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attacks.
Max CVSS
6.1
EPSS Score
0.15%
Published
2016-12-15
Updated
2019-03-07
Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive information via unspecified vectors.
Max CVSS
7.5
EPSS Score
1.04%
Published
2016-04-12
Updated
2016-12-03
MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Max CVSS
10.0
EPSS Score
0.44%
Published
2013-10-09
Updated
2013-10-10
7 vulnerabilities found