CVE-2017-2989
CriticalSummary
Adobe Campaign versions up to Build 8770 have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database.
Risk Assessment
Organizations may be exposed to unauthorized data access, potentially leading to loss of confidentiality and integrity of information.
Recommendation
It is recommended to upgrade to the latest version of Adobe Campaign to mitigate this security vulnerability.
Other vulnerabilities in Adobe Campaign
See all- CVE-2017-2968Critical
Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability.
- CVE-2022-42343Medium
Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
Original NVD description (English source)
Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database.