WID-SEC-W-2023-2920

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Adobe RoboHelp: Mehrere Schwachstellen

view advisory published 2023-11-14

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe RoboHelp ausnutzen, um Informationen offenzulegen oder beliebigen Programmcode auszuführen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2023-22275US——
Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lea…
CVE-2023-22274US——
Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to information disclo…
CVE-2023-22273US——
Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to R…
CVE-2023-22272US——
Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to information disclosure by an unauthenticated attacker.…
CVE-2023-22268US——
Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lea…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan