CVE-2017-2968
CriticalSummary
Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the system and potential takeover of the application.
Recommendation
It is recommended to upgrade to the latest version of Adobe Campaign to mitigate this vulnerability.
Other vulnerabilities in Adobe Campaign
See all- CVE-2017-2989Critical
Adobe Campaign versions up to Build 8770 have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database.
- CVE-2022-42343Medium
Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
Original NVD description (English source)
Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability.