CA
Product
Campaign
49
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 36High 10Medium 3Low 0
Watch
Add Campaign to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-75703 | 10.0 | Sep 22 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-84412 | 10.0 | Sep 22 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-83660 | 10.0 | Sep 22 | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-75721 | 10.0 | Sep 22 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-75723 | 10.0 | Sep 22 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-75699 | 10.0 | Sep 22 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-73369 | 10.0 | Sep 22 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-89275 | 10.0 | Sep 22 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-82004 | 10.0 | Sep 8 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) Affected: before 7.4.4; 7.4.4; 7.4.4 |
| CVE-2026-76195 | 10.0 | Aug 25 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) Affected: through 7.3.2; 7.4.1; 7.4.2; 7.4.2; 7.4.3; 7.4.3; +4 more |
| CVE-2026-76197 | 10.0 | Aug 25 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) Affected: through 7.3.2; 7.4.1; 7.4.2; 7.4.2; 7.4.3; 7.4.3; +4 more |
| CVE-2026-76193 | 10.0 | Aug 25 | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) Affected: through 7.3.2; 7.4.1; 7.4.2; 7.4.2; 7.4.3; 7.4.3; +4 more |
| CVE-2026-71398 | 10.0 | Aug 11 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) Affected: 7.2.1 before 7.4.4 |
| CVE-2026-27302 | 10.0 | Aug 11 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) Affected: 7.2.1 before 7.4.4 |
| CVE-2026-48323 | 10.0 | Aug 3 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) Affected: through 7.4.2; 7.4.3; 7.4.3; 7.4.3; 7.4.3 |
| CVE-2026-48331 | 10.0 | Aug 3 | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) Affected: through 7.4.2; 7.4.3; 7.4.3; 7.4.3; 7.4.3 |
| CVE-2026-48330 | 10.0 | Aug 3 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) Affected: through 7.4.2; 7.4.3; 7.4.3; 7.4.3; 7.4.3 |
| CVE-2026-48286 | 10.0 | Jun 30 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) Affected: through 7.4.3 |
| CVE-2026-47938 | 10.0 | Jun 9 | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) Affected: through 7.4.2; 7.4.3 |
| CVE-2026-48303 | 10.0 | Jun 9 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) Affected: before 7.4.3; 7.4.3 |
| CVE-2026-89276 | 9.9 | Sep 22 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-82013 | 9.9 | Sep 22 | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-82443 | 9.9 | Sep 22 | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-82008 | 9.9 | Sep 22 | Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-82010 | 9.9 | Sep 22 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-48326 | 9.9 | Aug 3 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) Affected: through 7.4.2; 7.4.3; 7.4.3; 7.4.3; 7.4.3 |
| CVE-2026-48333 | 9.8 | Aug 3 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) Affected: through 7.4.2; 7.4.3; 7.4.3; 7.4.3; 7.4.3 |
| CVE-2026-48449 | 9.8 | Jul 30 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) Affected: through 7.4.2; 7.4.3; 7.4.3; 7.4.3; 7.4.3 |
| CVE-2019-7850 | 9.8 | Jul 18 | Adobe Campaign Classic version 18.10.5-8984 and earlier versions have a Command injection vulnerability Affected: through 18.10.5.8984 |
| CVE-2026-48317 | 9.6 | Aug 3 | Adobe Campaign Classic (ACC) | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95) Affected: through 7.4.2; 7.4.3; 7.4.3; 7.4.3; 7.4.3 |
| CVE-2026-82009 | 9.1 | Sep 22 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-82011 | 9.1 | Sep 22 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-75728 | 9.1 | Sep 22 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2017-2989 | 9.1 | Apr 12 | Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database Affected: through 6.11 |
| CVE-2017-2968 | 9.1 | Feb 15 | Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability Affected: through 16.4 |
| CVE-2026-48381 | 9.0 | Aug 11 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) Affected: 7.2.1 before 7.4.4 |
| CVE-2026-48448 | 8.6 | Jul 30 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) Affected: through 7.4.2; 7.4.3; 7.4.3; 7.4.3; 7.4.3 |
| CVE-2021-21009 | 8.6 | Jan 13 | Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and earlier) are affected… Affected: before 19.1.8; 19.2 before 19.2.4; 20.1 before 20.1.4; 20.2 before 20.2.4; 20.3 before 20.3.3 |
| CVE-2026-82003 | 8.5 | Sep 22 | Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20) Affected: through 7.4.3; 7.4.4; 7.4.4 |
| CVE-2026-48399 | 7.5 | Aug 3 | Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657) Affected: through 7.4.2; 7.4.3; 7.4.3; 7.4.3; 7.4.3 |
| CVE-2021-40745 | 7.5 | Nov 17 | Adobe Campaign version 21.2.1 (and earlier) is affected by a Path Traversal vulnerability that could lead to reading arbitrary server files Affected: through 21.2.1 |
| CVE-2019-7941 | 7.5 | Jul 18 | Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Information Exposure Through an Error Message vulnerability Affected: through 18.10.5.8984 |
| CVE-2019-7848 | 7.5 | Jul 18 | Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Inadequate access control vulnerability Affected: through 18.10.5.8984 |
| CVE-2019-7847 | 7.5 | Jul 18 | Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability Affected: through 18.10.5.8984 |
| CVE-2019-7846 | 7.5 | Jul 18 | Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling vulnerability Affected: through 18.10.5.8984 |
| CVE-2019-7843 | 7.5 | Jul 18 | Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Insufficient input validation vulnerability Affected: through 18.10.5.8984 |
| CVE-2022-42343 | 6.5 | Dec 16 | Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read Affected: before 7.3.2; 8.0.0 before 8.4.2 |
| CVE-2017-2969 | 6.1 | Feb 15 | Adobe Campaign versions 16.4 Build 8724 and earlier have a cross-site scripting (XSS) vulnerability Affected: through 16.4 |
| CVE-2020-9666 | 5.5 | Jun 25 | Adobe Campaign Classic before 20.2 have an out-of-bounds read vulnerability Affected: before 20.2 |
Showing 49