Adobe RoboHelp Server 11 Update 3

CPE Details

Adobe RoboHelp Server 11 Update 3
adobe
robohelp_server
11
2022-06-24
13h18 +00:00
2022-06-24
18h21 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:adobe:robohelp_server:11:update3:*:*:*:*:*:*

Informations

Vendor

adobe

Product

robohelp_server

Version

11

Update

update3

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-22275 2023-11-17 12h52 +00:00 Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interaction.
7.5
Haute
CVE-2023-22272 2023-11-17 12h52 +00:00 Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interaction.
7.5
Haute
CVE-2023-22268 2023-11-17 12h52 +00:00 Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an low-privileged authenticated attacker. Exploitation of this issue does not require user interaction.
6.5
Moyen
CVE-2023-22274 2023-11-17 12h52 +00:00 Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interaction.
7.5
Haute
CVE-2023-22273 2023-11-17 12h52 +00:00 Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to Remote Code Execution by an admin authenticated attacker. Exploitation of this issue does not require user interaction.
7.2
Haute
CVE-2022-30670 2022-06-16 16h56 +00:00 RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require user interaction.
8.8
Haute
CVE-2021-42727 2021-11-22 15h37 +00:00 Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Bridge.
7.8
Haute
CVE-2021-28588 2021-06-28 14h13 +00:00 Adobe RoboHelp Server version 2019.0.9 (and earlier) is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.
8.8
Haute