CVE-2019-7847: Adobe Campaign

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user.

Affected products

• Adobe Campaign: up to and including 18.10.5.8984

Published 2019-07-18. Last modified 2026-06-17.