CVE Feed

    Dashboard / CVE / CVE-2012-0765

    CVE-2012-0765

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 8 and 9 for Word allow remote attackers to inject arbitrary web script or HTML via a crafted URL, related to certain .htm files in (1) template_stock and (2) template_csh directories.

    Published:Feb 15, 2012
    Last Modified:Apr 11, 2025
    EPS:Feb 15, 2012
    EPSS Score:0.01633
    CVSS Score:4.3

    Affected Products

    Vendor
    Adobe
    Product
    Robohelp
    Vendor
    Microsoft
    Product
    Windows
    Vendor
    Microsoft
    Product
    Word

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-23201 (CVSS 6.1) — Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabi…
    CVE-2021-21070 (CVSS 6.5) — Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability…
    CVE-2017-3105 (CVSS 6.1) — Adobe RoboHelp has an Open Redirect vulnerability. This affects versions before RH12.0.4.460 and RH2017 before…
    CVE-2017-3104 (CVSS 6.1) — Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and R…
    CVE-2016-7891 (CVSS 6.1) — Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could…
    CVE-2016-1035 (CVSS 7.5) — Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive inform…
    CVE-2013-5327 (CVSS 10) — MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of service (memory…
    CVE-2011-2133 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and…
    CVE-2011-0613 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow re…
    CVE-2010-2885 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2012-0765 — Adobe, Microsoft (Medium 4.3) | CVE-DB