Lucene search

K
cveAdobeCVE-2010-2885
HistoryOct 26, 2010 - 7:00 p.m.

CVE-2010-2885

2010-10-2619:00:02
CWE-79
adobe
web.nvd.nist.gov
27
cve
2010
2885
cross-site scripting
xss
adobe
robohelp
robohelp server
webhelp

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.066

Percentile

93.9%

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generation with RoboHelp for Word.

Affected configurations

Nvd
Node
adoberobohelpMatch7
OR
adoberobohelpMatch8
OR
adoberobohelp_serverMatch7
OR
adoberobohelp_serverMatch8
VendorProductVersionCPE
adoberobohelp7cpe:2.3:a:adobe:robohelp:7:*:*:*:*:*:*:*
adoberobohelp8cpe:2.3:a:adobe:robohelp:8:*:*:*:*:*:*:*
adoberobohelp_server7cpe:2.3:a:adobe:robohelp_server:7:*:*:*:*:*:*:*
adoberobohelp_server8cpe:2.3:a:adobe:robohelp_server:8:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.066

Percentile

93.9%

Related for CVE-2010-2885