Adobe RoboHelp 6

CPE Details

Adobe RoboHelp 6
adobe
robohelp
6
2007-08-23
19h16 +00:00
2009-03-05
16h16 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:adobe:robohelp:6:*:*:*:*:*:*:*

Informations

Vendor

adobe

Product

robohelp

Version

6

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-23201 2022-07-15 15h46 +00:00 Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
6.1
Medium
CVE-2021-21070 2021-04-19 12h28 +00:00 Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges.
6.5
Medium
CVE-2017-3104 2017-12-01 07h00 +00:00 Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.
6.1
Medium
CVE-2017-3105 2017-12-01 07h00 +00:00 Adobe RoboHelp has an Open Redirect vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.
6.1
Medium
CVE-2016-7891 2016-12-15 05h31 +00:00 Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attacks.
6.1
Medium
CVE-2009-0523 2009-02-26 15h00 +00:00 Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled when displaying the Help Errors log.
4.3
CVE-2009-0524 2009-02-26 15h00 +00:00 Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attackers to inject arbitrary web script or HTML via vectors involving files produced by RoboHelp.
4.3
CVE-2008-0642 2008-02-14 23h00 +00:00 Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire (WildFireExt) extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-1280.
4.3
CVE-2007-1280 2007-05-09 20h00 +00:00 Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a # (hash) in the URL path, as demonstrated using en/frameset-7.html, and possibly other unspecified vectors involving templates and (1) whstart.js and (2) whcsh_home.htm in WebHelp, (3) wf_startpage.js and (4) wf_startqs.htm in FlashHelp, or (5) WindowManager.dll in RoboHelp Server 6.
4.3