CVE-2019-7846

Adobe Campaign Classic (Windows/Linux) 18.10.5-8984 and earlier is affected by an improper error handling vulnerability that could lead to information disclosure for the current user. The Red Hat advisory confirms the same issue, describing it as an information disclosure vulnerability in ACC. Wh...

CVE-2026-48449

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability (CWE-863) that could lead to arbitrary code execution in the context of the current user. Exploitation does not require user interaction and is network-based with the vulnerability’s scope reported as CHANGED. Th...

CVE-2019-7850

CVE-2019-7850 affects Adobe Campaign Classic, with the vulnerability described as a Command Injection that could lead to arbitrary code execution in the context of the current user. Affected installations include Campaign Classic 18.10.5-8984 and earlier versions. The available connected document...

CVE-2026-71398

Affected product : Adobe Campaign Classic (ACC). Vulnerability : Incorrect Authorization (CWE-863) leading to arbitrary code execution in the context of the current user. Impact/requirements : Could be exploited to execute arbitrary code without user interaction; CVSS v3.1 score 10.0 (Network, Lo...

CVE-2026-48331

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to privilege escalation. The issue requires no user interaction and has a CRITICAL severity (CVSSv3.1: 10.0, Scope: CHANGED) with high impact on confidentiality, integrity, and availabil...

CVE-2019-7848

CVE-2019-7848 affects Adobe Campaign Classic up to version 18.10.5-8984. The issue is described as an inadequate access control vulnerability that could allow information disclosure in the context of the current user. Public sources in the connected set confirm affected product/version scope and ...

CVE-2019-7847

Adobe Campaign Classic (ACC) is affected by CVE-2019-7847: an XXE in ACC 18.10.5-8984 and earlier allows arbitrary read access to the filesystem in the context of the current user. Mitigation: apply the security update from APSB19-28 (Adobe Campaign) or upgrade to a patched ACC release; vendor ad...

CVE-2019-7843

Adobe Campaign Classic is affected by CVE-2019-7843 due to insufficient input validation in ACC 18.10.5-8984 and earlier. Exploitation could lead to information disclosure in the context of the current user. Public details in the connected documents identify the affected product (Adobe Campaign C...

CVE-2022-42343

CVE-2022-42343 affects Adobe Campaign Classic (versions 7.3.1 and earlier; 8.3.9 and earlier) with a Server-Side Request Forgery (SSRF) flaw that allows a low-privilege authenticated attacker to cause arbitrary file-system reads by injecting arbitrary URLs. The vulnerability arises from insuffici...

CVE-2019-7941

Adobe Campaign Classic is affected by CVE-2019-7941 for versions 18.10.5-8984 and earlier, with an Information Exposure Through an Error Message vulnerability that could lead to information disclosure in the context of the current user. Connected sources (Red Hat CVE entry and related advisories)...

CVE-2021-21009

CVE-2021-21009 affects Adobe Campaign Classic (Gold Standard 10 and earlier; 19.x–20.x lines listed) and is described as a server-side request forgery (SSRF). The vulnerability could let an attacker use a Campaign instance to issue unauthorized requests to internal or external resources, potentia...

CVE-2026-48323

CVE-2026-48323 affects Adobe Campaign Classic (ACC): an Improper Neutralization of Special Elements Used in a Template Engine vulnerability could allow arbitrary code execution in the current user context. Exploitation does not require user interaction; the scope has been changed. The connected d...

CVE-2026-48381

CVE-2026-48381 affects Adobe Campaign Classic (ACC). It describes an SQL Injection vulnerability (improper neutralization of special elements in SQL commands) that could allow arbitrary code execution in the context of the current user. Exploitation may be possible without user interaction, requi...

CVE-2026-48448

Adobe Campaign Classic (ACC) is affected by an SQL Injection vulnerability (CWE-89) due to improper neutralization of special elements in SQL commands. The issue could allow an attacker to read files on the file system without user interaction, with CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:C...

CVE-2026-48330

Adobe Campaign Classic (ACC) is affected by an SQL Injection (CWE-89) vulnerability: Improper neutralization of special elements in SQL commands could allow arbitrary code execution in the current user context. Attack vector is network with no user interaction required; scope is changed. CVSS v3....

CVE-2026-48317

Adobe Campaign Classic (ACC) is affected by an Eval Injection vulnerability (Improper Neutralization of Directives in Dynamically Evaluated Code) that could allow arbitrary code execution in the context of the current user. The issue can be exploited by a low-privileged attacker without user inte...

CVE-2026-76193

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that can lead to arbitrary code execution in the context of the current user. Exploitation requires no user interaction and has a changed scope , reflected in a CVSS 3.1 score of 10.0 (Critica...

CVE-2020-9666

CVE-2020-9666 affects Adobe Campaign Classic before 20.2 and is described as an out-of-bounds read vulnerability that could lead to information disclosure. Affected product/component: Adobe Campaign Classic (ACC). Root cause: out-of-bounds read vulnerability enabling information disclosure. Impac...

CVE-2021-40745

CVE-2021-40745 affects Adobe Campaign 21.2.1 and earlier. A path traversal vulnerability allows an unauthenticated attacker to read arbitrary server files by leveraging an exposed XML file to enumerate other files on the server. This is documented across multiple sources (NVD description, CNVD/CN...

CVE-2026-48333

CVE-2026-48333 affects Adobe Campaign Classic (ACC). The vulnerability is an Incorrect Authorization issue that could enable an attacker to attain elevated privileges. Exploitation does not require user interaction and is described with a high impact: confidentiality, integrity, and availability ...

CVE-2026-47938

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-47938) that could lead to arbitrary code execution in the context of the current user without user interaction. CVSSv3.1 base score 10.0 (CRITICAL), vect...

CVE-2017-2989

CVE-2017-2989 affects Adobe Campaign (Build 8770 and earlier). It describes an input validation bypass that could be exploited to read, write, or delete data in the Campaign database. Affected product: Adobe Campaign (Windows/Linux); root cause: input validation bypass in the Campaign database ha...

CVE-2017-2969

Adobe Campaign versions 16.4 Build 8724 and earlier are affected by a cross-site scripting (XSS) vulnerability (CVE-2017-2969). The issue is documented in CVE-2017-2969 and is addressed by Adobe’s APSB17-06 security update for Campaign, which resolves the XSS in the client console/inputs. Connect...

CVE-2026-48326

Adobe Campaign Classic (ACC) is affected by an SQL Injection (Improper Neutralization of Special Elements used in an SQL Command) that could enable arbitrary code execution in the context of the current user. The issue can be exploited by a low-privileged attacker without user interaction, and th...

CVE-2017-2968

CVE-2017-2968 affects Adobe Campaign versions 16.4 Build 8724 and earlier, described as a code injection vulnerability. The connected advisories indicate that an authenticated user with access to the client console could upload and execute a malicious file, potentially granting read/write access ...

CVE-2026-48399

Technical details about CVE-2026-48399 are not publicly available in the provided documents. Monitor for updates from official advisories to assess impact, affected products, and remediation.

CVE-2026-48286

Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability (CWE-863) that could permit arbitrary code execution in the context of the current user. Exploitation does not require user interaction, and the impact is limited to the use...

CVE-2026-76195

Adobe Campaign Classic (ACC) is affected by an OS Command Injection vulnerability (CWE-78) that could result in arbitrary code execution in the context of the current user. The vulnerability is exploitable over the network with low complexity , requires no prior authentication and no user interac...

CVE-2026-48303

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability (CWE-863) that could allow arbitrary code execution in the context of the current user. Exploitation does not require user interaction; the CVSS 3.1 vector is AV:N/AC:L/PR:N...

CVE-2026-76197

Adobe Campaign Classic (ACC) is affected by an OS Command Injection vulnerability (CWE-78) that could allow an attacker to achieve arbitrary code execution in the context of the current user. Exploitation does not require user interaction, and the scope is changed, meaning the vulnerable componen...

CVE-2026-27302

CVE-2026-27302 affects Adobe Campaign Classic (ACC). It is an Incorrect Authorization (CWE-863) vulnerability that could allow an attacker to execute arbitrary code in the context of the current user . Exploitation does not require user interaction; the vulnerability has a Changed scope with CVSS...

CVE-2026-82004

Adobe Campaign Classic (ACC) is affected by an OS Command Injection vulnerability (CWE-78) that allows a remote, unauthenticated attacker to execute arbitrary code in the context of the current user. The vulnerability is rated CVSS 10.0 (CRITICAL) with a network attack vector, low complexity, no ...