Vulnerabilities > Adobe > Robohelp Server > 11

DATE CVE VULNERABILITY TITLE RISK
2023-11-17 CVE-2023-22268 SQL Injection vulnerability in Adobe Robohelp Server
Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an low-privileged authenticated attacker.
network
low complexity
adobe CWE-89
6.5
2023-11-17 CVE-2023-22272 Improper Input Validation vulnerability in Adobe Robohelp Server
Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to information disclosure by an unauthenticated attacker.
network
low complexity
adobe CWE-20
7.5
2023-11-17 CVE-2023-22273 Path Traversal vulnerability in Adobe Robohelp Server
Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to Remote Code Execution by an admin authenticated attacker.
network
low complexity
adobe CWE-22
7.2
2023-11-17 CVE-2023-22274 XXE vulnerability in Adobe Robohelp Server
Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to information disclosure by an unauthenticated attacker.
network
low complexity
adobe CWE-611
7.5
2023-11-17 CVE-2023-22275 SQL Injection vulnerability in Adobe Robohelp Server
Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an unauthenticated attacker.
network
low complexity
adobe CWE-89
7.5
2021-11-22 CVE-2021-42727 Out-of-bounds Write vulnerability in Adobe Robohelp Server
Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user.
network
adobe CWE-787
critical
9.3