Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Advisory: Adobe Campaign Classic — adobe.com/trust/security/products/campaign/apsb26-162.html Clear all filters
TI-2026-81443 CVE-2026-104353 · GHSA-8ghg-r6p6-hw6m

OS command injection in Adobe Campaign Classic allows code execution

Priority MEDIUM 45

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.013 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-78
TI-2026-81447 CVE-2026-105780 · GHSA-rp3v-m642-6g4x

Adobe Campaign Classic authorization flaw enables code execution

Priority MEDIUM 43

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0049 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-863
TI-2026-81445 CVE-2026-105489 · GHSA-623g-4gw8-7j44

SQL injection in Adobe Campaign Classic enables code execution

Priority MEDIUM 43

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the curren…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00476 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-89
TI-2026-81441 CVE-2026-104350 · GHSA-mcf8-5pc2-3wxx

Reflected cross-site scripting in Adobe Campaign Classic

Priority MEDIUM 43

Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00605 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-79
TI-2026-81448 CVE-2026-105781 · GHSA-r3v6-wxx2-553x

SQL injection in Adobe Campaign Classic allows arbitrary code execution

Priority MEDIUM 49

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the curren…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00518 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-89
TI-2026-81442 CVE-2026-104351 · GHSA-2pq5-jv73-pp93

Code injection in Adobe Campaign Classic lets attackers run code

Priority MEDIUM 44

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00573 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-94
TI-2026-81444 CVE-2026-104354 · GHSA-7wqj-f9jv-qp8r

SQL injection in Adobe Campaign Classic allows arbitrary code execution

Priority MEDIUM 42

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the curren…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00496 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-89
TI-2026-81446 CVE-2026-105779 · GHSA-8rvh-6w2p-xpwx

SQL injection in Adobe Campaign Classic allows security bypass

Priority LOW 39

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00295 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-89