23 matches found
CVE-2019-7846
Adobe Campaign Classic (Windows/Linux) 18.10.5-8984 and earlier is affected by an improper error handling vulnerability that could lead to information disclosure for the current user. The Red Hat advisory confirms the same issue, describing it as an information disclosure vulnerability in ACC. Wh...
CVE-2026-48449
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability (CWE-863) that could lead to arbitrary code execution in the context of the current user. Exploitation does not require user interaction and is network-based with the vulnerability’s scope reported as CHANGED. Th...
CVE-2019-7850
CVE-2019-7850 affects Adobe Campaign Classic, with the vulnerability described as a Command Injection that could lead to arbitrary code execution in the context of the current user. Affected installations include Campaign Classic 18.10.5-8984 and earlier versions. The available connected document...
CVE-2019-7847
Adobe Campaign Classic (ACC) is affected by CVE-2019-7847: an XXE in ACC 18.10.5-8984 and earlier allows arbitrary read access to the filesystem in the context of the current user. Mitigation: apply the security update from APSB19-28 (Adobe Campaign) or upgrade to a patched ACC release; vendor ad...
CVE-2019-7848
CVE-2019-7848 affects Adobe Campaign Classic up to version 18.10.5-8984. The issue is described as an inadequate access control vulnerability that could allow information disclosure in the context of the current user. Public sources in the connected set confirm affected product/version scope and ...
CVE-2022-42343
CVE-2022-42343 affects Adobe Campaign Classic (versions 7.3.1 and earlier; 8.3.9 and earlier) with a Server-Side Request Forgery (SSRF) flaw that allows a low-privilege authenticated attacker to cause arbitrary file-system reads by injecting arbitrary URLs. The vulnerability arises from insuffici...
CVE-2019-7941
Adobe Campaign Classic is affected by CVE-2019-7941 for versions 18.10.5-8984 and earlier, with an Information Exposure Through an Error Message vulnerability that could lead to information disclosure in the context of the current user. Connected sources (Red Hat CVE entry and related advisories)...
CVE-2019-7843
Adobe Campaign Classic is affected by CVE-2019-7843 due to insufficient input validation in ACC 18.10.5-8984 and earlier. Exploitation could lead to information disclosure in the context of the current user. Public details in the connected documents identify the affected product (Adobe Campaign C...
CVE-2026-48331
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to privilege escalation. The issue requires no user interaction and has a CRITICAL severity (CVSSv3.1: 10.0, Scope: CHANGED) with high impact on confidentiality, integrity, and availabil...
CVE-2026-48323
CVE-2026-48323 affects Adobe Campaign Classic (ACC): an Improper Neutralization of Special Elements Used in a Template Engine vulnerability could allow arbitrary code execution in the current user context. Exploitation does not require user interaction; the scope has been changed. The connected d...
CVE-2021-40745
CVE-2021-40745 affects Adobe Campaign 21.2.1 and earlier. A path traversal vulnerability allows an unauthenticated attacker to read arbitrary server files by leveraging an exposed XML file to enumerate other files on the server. This is documented across multiple sources (NVD description, CNVD/CN...
CVE-2026-48448
Adobe Campaign Classic (ACC) is affected by an SQL Injection vulnerability (CWE-89) due to improper neutralization of special elements in SQL commands. The issue could allow an attacker to read files on the file system without user interaction, with CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:C...
CVE-2017-2989
CVE-2017-2989 affects Adobe Campaign (Build 8770 and earlier). It describes an input validation bypass that could be exploited to read, write, or delete data in the Campaign database. Affected product: Adobe Campaign (Windows/Linux); root cause: input validation bypass in the Campaign database ha...
CVE-2026-48330
Adobe Campaign Classic (ACC) is affected by an SQL Injection (CWE-89) vulnerability: Improper neutralization of special elements in SQL commands could allow arbitrary code execution in the current user context. Attack vector is network with no user interaction required; scope is changed. CVSS v3....
CVE-2017-2969
Adobe Campaign versions 16.4 Build 8724 and earlier are affected by a cross-site scripting (XSS) vulnerability (CVE-2017-2969). The issue is documented in CVE-2017-2969 and is addressed by Adobe’s APSB17-06 security update for Campaign, which resolves the XSS in the client console/inputs. Connect...
CVE-2026-47938
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-47938) that could lead to arbitrary code execution in the context of the current user without user interaction. CVSSv3.1 base score 10.0 (CRITICAL), vect...
CVE-2026-48333
CVE-2026-48333 affects Adobe Campaign Classic (ACC). The vulnerability is an Incorrect Authorization issue that could enable an attacker to attain elevated privileges. Exploitation does not require user interaction and is described with a high impact: confidentiality, integrity, and availability ...
CVE-2026-48317
Adobe Campaign Classic (ACC) is affected by an Eval Injection vulnerability (Improper Neutralization of Directives in Dynamically Evaluated Code) that could allow arbitrary code execution in the context of the current user. The issue can be exploited by a low-privileged attacker without user inte...
CVE-2017-2968
CVE-2017-2968 affects Adobe Campaign versions 16.4 Build 8724 and earlier, described as a code injection vulnerability. The connected advisories indicate that an authenticated user with access to the client console could upload and execute a malicious file, potentially granting read/write access ...
CVE-2026-48286
Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability (CWE-863) that could permit arbitrary code execution in the context of the current user. Exploitation does not require user interaction, and the impact is limited to the use...
CVE-2026-48326
Adobe Campaign Classic (ACC) is affected by an SQL Injection (Improper Neutralization of Special Elements used in an SQL Command) that could enable arbitrary code execution in the context of the current user. The issue can be exploited by a low-privileged attacker without user interaction, and th...
CVE-2026-48303
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability (CWE-863) that could allow arbitrary code execution in the context of the current user. Exploitation does not require user interaction; the CVSS 3.1 vector is AV:N/AC:L/PR:N...