Detections
Analytics
Adobe RoboHelp / RoboHelp Server DOM-based XSS (APSB11-23)
medium Nessus Plugin ID 66317
Language:
Synopsis
An application on the remote Windows host has a cross-site scripting vulnerability.Description
The version of RoboHelp or RoboHelp Server installed on the remote host has a cross-site scripting vulnerability. An attacker could exploit this vulnerability by tricking a user into requesting a maliciously crafted URL, resulting in arbitrary script code execution.Solution
Apply the relevant update referenced in Adobe security bulletin APSB11-23.See Also
https://www.adobe.com/support/security/bulletins/apsb11-23.html
https://www.us-cert.gov/ncas/alerts/TA11-222A
Plugin Details
Severity: Medium
ID: 66317
File Name: robohelp_apsb11_23.nasl
Version: 1.13
Type: Local
Agent: windows
Family: Windows
Published: 5/4/2013
Updated: 6/12/2020
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 2.3
Percentile: 8.69
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.4
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:adobe:robohelp_server, cpe:/a:adobe:robohelp
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 8/9/2011
Vulnerability Publication Date: 8/9/2011
Reference Information
CVE: CVE-2011-2133
BID: 49105