GCVE - cpe:2.3:a:adobe:robohelp:6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:robohelp:6:*:*:*:*:*:*:*

part: a version: 6 update: *

Vendor	Adobe (`fb293c1b-cab3-5565-9184-186e4ece530b`)
Product	Robohelp (`5d96e52e-90ff-5bb3-b4d5-f8011167bc73`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-0524`	vulnerable	2026-06-08 04:51:09.859159	Details available Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attackers to inject arbitrary web script or HTML via vectors involving files produced by RoboHelp. Published: 2009-02-26T16:00:00.000Z Updated: 2024-08-07T04:40:03.976Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/0512 http://securitytracker.com/id?1021755 http://www.securityfocus.com/bid/33888 http://secunia.com/advisories/34048 http://www.adobe.com/support/security/bulletins/apsb09-02.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0523`	vulnerable	2026-06-08 04:51:09.856891	Details available Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled when displaying the Help Errors log. Published: 2009-02-26T16:00:00.000Z Updated: 2024-08-07T04:40:05.067Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/0512 http://securitytracker.com/id?1021755 http://secunia.com/advisories/34048 http://www.adobe.com/support/security/bulletins/apsb09-02.html https://exchange.xforce.ibmcloud.com/vulnerabilities/48890	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0642`	vulnerable	2026-06-08 04:50:17.353875	Details available Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire (WildFireExt) extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-1280. Published: 2008-02-15T00:00:00.000Z Updated: 2025-04-23T15:33:13.035Z Open on db.gcve.eu Reference links http://www.adobe.com/support/security/bulletins/apsb08-05.html http://secunia.com/advisories/28945 http://securitytracker.com/id?1019397 http://www.securityfocus.com/bid/27763 http://www.vupen.com/english/advisories/2008/0537	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1280`	vulnerable	2026-06-08 04:49:41.965591	Details available Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a # (hash) in the URL path, as demonstrated using en/frameset-7.html, and possibly other unspecified vectors involving templates and (1) whstart.js and (2) whcsh_home.htm in WebHelp, (3) wf_startpage.js and (4) wf_startqs.htm in FlashHelp, or (5) WindowManager.dll in RoboHelp Server 6. Published: 2007-05-09T22:00:00.000Z Updated: 2024-08-07T12:50:35.036Z Open on db.gcve.eu Reference links http://secunia.com/advisories/25211 http://www.securityfocus.com/bid/23878 http://www.vupen.com/english/advisories/2007/1714 https://exchange.xforce.ibmcloud.com/vulnerabilities/34181 http://www.securitytracker.com/id?1018020	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.