CVE-2023-22272

HIGH

Adobe RoboHelp Server <11.4 - Info Disclosure

Title source: llm
STIX 2.1

Description

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interaction.

References (1)

Core 1
Core References
Release Notes, Vendor Advisory vendor-advisory
https://helpx.adobe.com/security/products/robohelp-server/apsb23-53.html

Scores

CVSS v3 7.5
EPSS 0.0035
EPSS Percentile 57.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-20
Status published
Products (1)
adobe/robohelp_server < 11.4
Published Nov 17, 2023
Tracked Since Feb 18, 2026