Adobe Campaign vulnerabilities

49 CVEs affecting Adobe Campaign, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-89276, published 2026-09-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-7850, published 2019-07-18. Critical severity, CVSS 9.8. EPSS: 5.8% chance of exploitation in the next 30 days. Adobe Campaign Classic version 18.10.5-8984 and earlier versions have a Command injection vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current…
CVE-2021-40745, published 2021-11-17. High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days. Adobe Campaign version 21.2.1 (and earlier) is affected by a Path Traversal vulnerability that could lead to reading arbitrary server files. By leveraging an exposed XML file, an unauthenticated…
CVE-2017-2989, published 2017-04-12. Critical severity, CVSS 9.1. EPSS: 3.7% chance of exploitation in the next 30 days. Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database.
CVE-2026-76197, published 2026-08-25. Critical severity, CVSS 10.0. EPSS: 3.5% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution…
CVE-2026-76195, published 2026-08-25. Critical severity, CVSS 10.0. EPSS: 3.5% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution…
CVE-2026-82004, published 2026-09-08. Critical severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution…
CVE-2019-7847, published 2019-07-18. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary…
CVE-2019-7843, published 2019-07-18. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Insufficient input validation vulnerability. Successful exploitation could lead to Information Disclosure in the context of…
CVE-2019-7941, published 2019-07-18. High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days. Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Information Exposure Through an Error Message vulnerability. Successful exploitation could lead to Information Disclosure in…
CVE-2019-7848, published 2019-07-18. High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days. Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Inadequate access control vulnerability. Successful exploitation could lead to Information Disclosure in the context of the…

Latest

CVE-2026-89276, published 2026-09-22. Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-89275, published 2026-09-22. Critical severity, CVSS 10.0. EPSS: 1.2% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-84412, published 2026-09-22. Critical severity, CVSS 10.0. EPSS: 1.2% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-83660, published 2026-09-22. Critical severity, CVSS 10.0. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction.…
CVE-2026-82443, published 2026-09-22. Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to…
CVE-2026-82013, published 2026-09-22. Critical severity, CVSS 9.9. EPSS: 0.8% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to…
CVE-2026-82011, published 2026-09-22. Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A…
CVE-2026-82010, published 2026-09-22. Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the…
CVE-2026-82009, published 2026-09-22. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the…
CVE-2026-82008, published 2026-09-22. Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days. Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker…