CVE Catalog

CVE-2021-21009

HighCVSS 8.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
3.20%

87th percentile - higher than 87% of all known CVEs

Summary

Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and earlier) are affected by a server-side request forgery (SSRF) vulnerability. Successful exploitation could allow an attacker to use the Campaign instance to issue unauthorized requests to internal or external resources.

Risk Assessment

An attacker could leverage the Campaign server to attack internal network resources, potentially leading to data exposure or further system compromise.

Recommendation

It is recommended to immediately update Adobe Campaign Classic to the latest available version that includes a fix for this vulnerability.

Other vulnerabilities in Adobe Campaign Classic

See all
Original NVD description (English source)

Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and earlier) are affected by a server-side request forgery (SSRF) vulnerability. Successful exploitation could allow an attacker to use the Campaign instance to issue unauthorized requests to internal or external resources.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS