Adobe Campaign Classic < 7.4.3 build 9398 Multiple Vulnerabilities (APSB26-114)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(363843);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/08");

  script_cve_id("CVE-2026-48449", "CVE-2026-48448");

  script_name(english:"Adobe Campaign Classic < 7.4.3 build 9398 Multiple Vulnerabilities (APSB26-114)");

  script_set_attribute(attribute:"synopsis", value:
"The Adobe Campaign Classic instance installed on the remote host is affected by multiple vulnerabilities.");
  script_set_attribute(attribute:"description", value:
"The version of Adobe Campaign Classic installed on the remote host is prior to 7.4.3 build 9398. It is, therefore,
affected by multiple vulnerabilities:

  - An incorrect authorization vulnerability that could result in arbitrary code execution in the context of the
    current user. Exploitation of this issue does not require user interaction. (CVE-2026-48449)

  - An improper neutralization of special elements used in an SQL command (SQL injection) vulnerability that could
    lead to arbitrary file system read. Exploitation of this issue does not require user interaction.
    (CVE-2026-48448)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://helpx.adobe.com/security/products/campaign/apsb26-114.html");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Adobe Campaign Classic version 7.4.3 build 9398 or later.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-48449");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/07/29");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/07/29");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/07");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:adobe:campaign_classic");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("adobe_campaign_classic_win_installed.nbin");
  script_require_keys("installed_sw/Adobe Campaign Classic");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'Adobe Campaign Classic', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {'fixed_version': '7.4.3.9398', 'fixed_display': 'ACC v7 7.4.3 build 9398'}
      ]
    }
  ]
};

var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE, flags:{"sqli":TRUE});
vdf::handle_check_and_report_errors(vdf_result:result);