Adobe Campaign vulnerabilities

Adobe Campaign versions up to Build 8770 have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database.

Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability.

Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.