CVE-2022-42343: Adobe Campaign

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.

Affected products

• Adobe Campaign: before 7.3.2 (fixed in 7.3.2); from 8.0.0, before 8.4.2 (fixed in 8.4.2)

Published 2022-12-16. Last modified 2026-08-06.