CVE Feed

    Dashboard / CVE / CVE-2021-21070

    CVE-2021-21070

    Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges.

    Published:Apr 19, 2021
    Last Modified:Apr 23, 2025
    EPS:Apr 19, 2021
    EPSS Score:0.00462
    CVSS Score:6.5

    Affected Products

    Vendor
    Adobe
    Product
    Robohelp
    Vendor
    Microsoft
    Product
    Windows

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-427 Uncontrolled Search Path Element

    Related CVEs

    CVE-2022-23201 (CVSS 6.1) — Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabi…
    CVE-2017-3105 (CVSS 6.1) — Adobe RoboHelp has an Open Redirect vulnerability. This affects versions before RH12.0.4.460 and RH2017 before…
    CVE-2017-3104 (CVSS 6.1) — Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and R…
    CVE-2016-7891 (CVSS 6.1) — Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could…
    CVE-2016-1035 (CVSS 7.5) — Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive inform…
    CVE-2013-5327 (CVSS 10) — MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of service (memory…
    CVE-2012-0765 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 8 and 9 for Word allow remote attackers …
    CVE-2011-2133 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and…
    CVE-2011-0613 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow re…
    CVE-2010-2885 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High