CVE-2023-22274

—

CVSS 3.1

7.5 high

EPSS

1%p72

Published

Nov 17, 2023 (Nov 17, 2023)

Modified

Jun 17, 2026

Description

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interaction.

Vendors: adobe
Products: robohelp server
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.