CVE-2008-2991: adobe robohelp_server Cross-site Scripting

EPSS trend

Probability

16.51%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 16.51% on 19-09-2026

19-09-202619-10-2026

EPSS score

16.51%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securitytracker.com)
Maturity: unknown
referenceUnverified
Exploit Reference (adobe.com)
Maturity: unknown

References

5 links

www.securityfocus.com/bid/30137VDB EntryX Refsource BIDExploit
www.vupen.com/english/advisories/2008/2026/referencesVDB EntryX Refsource VUPEN
secunia.com/advisories/31001Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1020442VDB EntryX Refsource SECTRACKExploit
www.adobe.com/support/security/bulletins/apsb08-16.htmlX Refsource CONFIRMExploit

Related vulnerabilities

CVE-2021-42727adobebridge+139.40%4y ago22-11-2021 15:37Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Bridge.CVE-2021-28588adoberobohelp_server6.21%5y ago28-06-2021 14:13Adobe RoboHelp Server version 2019.0.9 (and earlier) is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.CVE-2007-1280adoberobohelp+14.89%19y ago09-05-2007 22:00Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a # (hash) in the URL path, as demonstrated using en/frameset-7.html, and possibly other unspecified vectors involving templates and (1) whstart.js and (2) whcsh_home.htm in WebHelp, (3) wf_startpage.js and (4) wf_startqs.htm in FlashHelp, or (5) WindowManager.dll in RoboHelp Server 6.CVE-2022-30670adoberobohelp+11.49%4y ago16-06-2022 16:56RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require user interaction.CVE-2011-2133adoberobohelp+12.99%15y ago11-08-2011 22:00Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and 9, allows remote attackers to inject arbitrary web script or HTML via the URI, related to template_stock/whutils.js.CVE-2011-0613adoberobohelp+11.73%15y ago16-05-2011 17:00Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to (1) wf_status.htm and (2) wf_topicfs.htm in RoboHTML/WildFireExt/TemplateStock/.

All vulnerabilities inrobohelp_server

CVE-2008-2991: adobe robohelp_server Cross-site Scripting

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References