CVE-2010-2885

Currently unrated

Key Information:

Vendor
Adobe
Status
Robohelp
Robohelp Server
Vendor
CVE Published:
26 October 2010

Summary

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generation with RoboHelp for Word.

References

http://www.vupen.com/english/advisories/2010/2718
vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/41870
third-party-advisoryx_refsource_SECUNIA
http://www.adobe.com/support/security/bulletins/apsb10-23...
x_refsource_CONFIRM

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.