Vulnerabilities > Adobe > Robohelp Server > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-11-17 | CVE-2023-22272 | Improper Input Validation vulnerability in Adobe Robohelp Server Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to information disclosure by an unauthenticated attacker. | 7.5 |
2023-11-17 | CVE-2023-22273 | Path Traversal vulnerability in Adobe Robohelp Server Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to Remote Code Execution by an admin authenticated attacker. | 7.2 |
2023-11-17 | CVE-2023-22274 | XXE vulnerability in Adobe Robohelp Server Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to information disclosure by an unauthenticated attacker. | 7.5 |
2023-11-17 | CVE-2023-22275 | SQL Injection vulnerability in Adobe Robohelp Server Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an unauthenticated attacker. | 7.5 |
2021-11-22 | CVE-2021-42727 | Out-of-bounds Write vulnerability in Adobe Robohelp Server Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. | 7.8 |
2021-06-28 | CVE-2021-28588 | Path Traversal vulnerability in Adobe Robohelp Server Adobe RoboHelp Server version 2019.0.9 (and earlier) is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. | 8.8 |