CVE-2009-0524: adobe robohelp Cross-site Scripting

EPSS trend

Probability

2.15%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

0.00 pp

From 2.15% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

7 links

www.vupen.com/english/advisories/2009/0512VDB EntryX Refsource VUPENVendor Advisory
securitytracker.com/id?1021755VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/33888VDB EntryX Refsource BIDPatch
secunia.com/advisories/34048Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.adobe.com/support/security/bulletins/apsb09-02.htmlX Refsource CONFIRMPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/48889VDB EntryX Refsource XF
secunia.com/advisories/34032Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Related vulnerabilities

CVE-2013-5327adoberobohelp3.84%13y ago09-10-2013 14:44MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.CVE-2021-21070adoberobohelp1.60%5y ago19-04-2021 12:28Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges.CVE-2021-42727adobebridge+139.40%4y ago22-11-2021 15:37Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Bridge.CVE-2021-28588adoberobohelp_server6.21%5y ago28-06-2021 14:13Adobe RoboHelp Server version 2019.0.9 (and earlier) is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.CVE-2007-1280adoberobohelp+14.89%19y ago09-05-2007 22:00Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a # (hash) in the URL path, as demonstrated using en/frameset-7.html, and possibly other unspecified vectors involving templates and (1) whstart.js and (2) whcsh_home.htm in WebHelp, (3) wf_startpage.js and (4) wf_startqs.htm in FlashHelp, or (5) WindowManager.dll in RoboHelp Server 6.CVE-2016-1035adoberobohelp3.54%10y ago12-04-2016 23:00Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive information via unspecified vectors.

All vulnerabilities inrobohelp robohelp_server

CVE-2009-0524: adobe robohelp Cross-site Scripting

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References