CVSS: 6.8EPSS: 0%CPEs: 2EXPL: 0CVE-2023-22268 – ZDI-CAN-21308: Adobe RoboHelp Server getRHSGroupsForRoles SQL Injection Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-22268
15 Nov 2023 — Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an low-privileged authenticated attacker. Exploitation of this issue does not require user interaction. Las versiones 11.4 y anteriores de Adobe RoboHelp Server se ven afectadas por una neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando SQL ("inyección SQL")... • https://helpx.adobe.com/security/products/robohelp-server/apsb23-53.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2023-22272 – ZDI-CAN-21309: Adobe RoboHelp Server resolveDistinguishedName LDAP Injection Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-22272
15 Nov 2023 — Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interaction. Las versiones 11.4 y anteriores de Adobe RoboHelp Server se ven afectadas por una vulnerabilidad de validación de entrada incorrecta que podría provocar la divulgación de información por parte de un atacante no autenticado. La explotación de este problema no requiere l... • https://helpx.adobe.com/security/products/robohelp-server/apsb23-53.html • CWE-20: Improper Input Validation •
CVSS: 8.3EPSS: 3%CPEs: 2EXPL: 0CVE-2023-22273 – ZDI-CAN-21307: Adobe RoboHelp Server OnPublishFile Directory Traversal Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-22273
15 Nov 2023 — Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to Remote Code Execution by an admin authenticated attacker. Exploitation of this issue does not require user interaction. Las versiones 11.4 y anteriores de Adobe RoboHelp Server se ven afectadas por una vulnerabilidad de limitación inadecuada de un nombre de ruta a un directorio restringido ("Path Traversal") que podría provocar la ... • https://helpx.adobe.com/security/products/robohelp-server/apsb23-53.html • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 8.2EPSS: 0%CPEs: 2EXPL: 0CVE-2023-22274 – ZDI-CAN-21305: Adobe RoboHelp Server UpdateCommandStream XML External Entity Processing Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-22274
15 Nov 2023 — Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interaction. Las versiones 11.4 y anteriores de Adobe RoboHelp Server se ven afectadas por una vulnerabilidad de restricción inadecuada de referencia de entidad externa XML ('XXE') que podría provocar la divulgación de información por parte de un... • https://helpx.adobe.com/security/products/robohelp-server/apsb23-53.html • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2023-22275 – ZDI-CAN-21306: Adobe RoboHelp Server GetNewUserId SQL Injection Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-22275
15 Nov 2023 — Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interaction. Las versiones 11.4 y anteriores de Adobe RoboHelp Server se ven afectadas por una neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando SQL ("inyección SQL") que podría p... • https://helpx.adobe.com/security/products/robohelp-server/apsb23-53.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.0EPSS: 0%CPEs: 6EXPL: 0CVE-2022-30670 – Escalate Privileges to Server Admin - Robohelp Server
https://notcve.org/view.php?id=CVE-2022-30670
16 Jun 2022 — RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require user interaction. RoboHelp Server versiones anteriores a la actualización 3 de RHS 11, están afectadas por una vulnerabilidad de Autorización Inapropiada que podría conllevar a una elevación de privilegios. Un atac... • https://helpx.adobe.com/security/products/robohelp-server/apsb22-31.html • CWE-285: Improper Authorization •
CVSS: 9.3EPSS: 32%CPEs: 2EXPL: 0CVE-2021-42727 – Adobe Bridge Buffer Overflow Arbitrary code execution
https://notcve.org/view.php?id=CVE-2021-42727
11 Nov 2021 — Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Bridge. Adobe Bridge versión 11.1.1 (y anteriores) está afectado por una vulnerabilidad de desbordamiento de pila debido a la gestión insegura de un archivo manipulado, lo que puede dar lugar a la ejecución de código a... • https://helpx.adobe.com/security/products/bridge/apsb21-94.html • CWE-787: Out-of-bounds Write •
CVSS: 9.0EPSS: 6%CPEs: 1EXPL: 0CVE-2021-28588 – Adobe RoboHelp Server folderId Directory Traversal Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-28588
10 Jun 2021 — Adobe RoboHelp Server version 2019.0.9 (and earlier) is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Adobe RoboHelp Server versiones 2019.0.9 (y anteriores), está afectada por una vulnerabilidad de Salto de Ruta cuando se analiza una petición HTTP POST diseñada. Un atacante aut... • https://www.zerodayinitiative.com/advisories/ZDI-21-660 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.1EPSS: 1%CPEs: 5EXPL: 0CVE-2011-2133
https://notcve.org/view.php?id=CVE-2011-2133
11 Aug 2011 — Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and 9, allows remote attackers to inject arbitrary web script or HTML via the URI, related to template_stock/whutils.js. Vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Adobe RoboHelp 8 y 9 anterior a v9.0.1.262, y RoboHelp Server 8 and 9 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de URI, relacionado con template_stock/whutils.js • http://securityreason.com/securityalert/8334 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0CVE-2011-0613
https://notcve.org/view.php?id=CVE-2011-0613
16 May 2011 — Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to (1) wf_status.htm and (2) wf_topicfs.htm in RoboHTML/WildFireExt/TemplateStock/. Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en RoboHelp v7 y v8, y RoboHelp Server v7 y v8, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetr... • http://www.adobe.com/support/security/bulletins/apsb11-09.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •