CVE-2022-42343

CVE-2022-42343 affects Adobe Campaign Classic (versions 7.3.1 and earlier; 8.3.9 and earlier) with a Server-Side Request Forgery (SSRF) flaw that allows a low-privilege authenticated attacker to cause arbitrary file-system reads by injecting arbitrary URLs. The vulnerability arises from insuffici...

CVE-2021-21009

CVE-2021-21009 affects Adobe Campaign Classic (Gold Standard 10 and earlier; 19.x–20.x lines listed) and is described as a server-side request forgery (SSRF). The vulnerability could let an attacker use a Campaign instance to issue unauthorized requests to internal or external resources, potentia...

CVE-2020-9666

CVE-2020-9666 affects Adobe Campaign Classic before 20.2 and is described as an out-of-bounds read vulnerability that could lead to information disclosure. Affected product/component: Adobe Campaign Classic (ACC). Root cause: out-of-bounds read vulnerability enabling information disclosure. Impac...

CVE-2026-48303

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability (CWE-863) that could allow arbitrary code execution in the context of the current user. Exploitation does not require user interaction; the CVSS 3.1 vector is AV:N/AC:L/PR:N...

CVE-2026-82004

Adobe Campaign Classic (ACC) is affected by an OS Command Injection vulnerability (CWE-78) that allows a remote, unauthenticated attacker to execute arbitrary code in the context of the current user. The vulnerability is rated CVSS 10.0 (CRITICAL) with a network attack vector, low complexity, no ...