Lucene search

K
nvd[email protected]NVD:CVE-2010-2885
HistoryOct 26, 2010 - 7:00 p.m.

CVE-2010-2885

2010-10-2619:00:02
CWE-79
web.nvd.nist.gov
4

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.066

Percentile

93.9%

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generation with RoboHelp for Word.

Affected configurations

Nvd
Node
adoberobohelpMatch7
OR
adoberobohelpMatch8
OR
adoberobohelp_serverMatch7
OR
adoberobohelp_serverMatch8
VendorProductVersionCPE
adoberobohelp7cpe:2.3:a:adobe:robohelp:7:*:*:*:*:*:*:*
adoberobohelp8cpe:2.3:a:adobe:robohelp:8:*:*:*:*:*:*:*
adoberobohelp_server7cpe:2.3:a:adobe:robohelp_server:7:*:*:*:*:*:*:*
adoberobohelp_server8cpe:2.3:a:adobe:robohelp_server:8:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.066

Percentile

93.9%

Related for NVD:CVE-2010-2885