Adobe Adobe Campaign Classic
45 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-105780 | ≤ 7.4.4 build 9402 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | CRITICAL 9.9 | |||
| CVE-2026-104353 | ≤ 7.4.4 build 9402 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) | CRITICAL 9.9 | |||
| CVE-2026-105489 | ≤ 7.4.4 build 9402 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | CRITICAL 9.9 | |||
| CVE-2026-105781 | ≤ 7.4.4 build 9402 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | CRITICAL 10.0 | |||
| CVE-2026-105779 | ≤ 7.4.4 build 9402 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | CRITICAL 9.1 | |||
| CVE-2026-104354 | ≤ 7.4.4 build 9402 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | CRITICAL 9.1 | |||
| CVE-2026-104351 | ≤ 7.4.4 build 9402 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL 9.9 | |||
| CVE-2026-104350 | ≤ 7.4.4 build 9402 | Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79) | CRITICAL 9.3 | |||
| CVE-2026-84412 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL 10.0 | 1.2 % | ||
| CVE-2026-75703 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL 10.0 | 1.2 % | ||
| CVE-2026-89276 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-83660 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) | CRITICAL 10.0 | 0.8 % | ||
| CVE-2026-82013 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) | CRITICAL 9.9 | 0.8 % | ||
| CVE-2026-82009 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | CRITICAL 9.1 | 1.0 % | ||
| CVE-2026-82003 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20) | HIGH 8.5 | 0.5 % | ||
| CVE-2026-75721 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL 10.0 | 1.2 % | ||
| CVE-2026-75723 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | CRITICAL 10.0 | 1.2 % | ||
| CVE-2026-75699 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL 10.0 | 1.2 % | ||
| CVE-2026-73369 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL 10.0 | 1.2 % | ||
| CVE-2026-82443 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) | CRITICAL 9.9 | 0.8 % | ||
| CVE-2026-82011 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | CRITICAL 9.1 | 0.6 % | ||
| CVE-2026-82008 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20) | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-89275 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL 10.0 | 1.2 % | ||
| CVE-2026-75728 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | CRITICAL 9.1 | 1.0 % | ||
| CVE-2026-82010 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-82004 | ≤ 7.4.4 build 9401 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) | CRITICAL 10.0 | 3.3 % | ||
| CVE-2026-76195 | ≤ ACC v7: 7.4.4 build 9400 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) | CRITICAL 10.0 | 3.5 % | ||
| CVE-2026-76197 | ≤ ACC v7: 7.4.4 build 9400 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) | CRITICAL 10.0 | 3.5 % | ||
| CVE-2026-76193 | ≤ ACC v7: 7.4.4 build 9400 | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) | CRITICAL 10.0 | 1.3 % | ||
| CVE-2026-48381 | ≤ ACC v7: 7.4.3 build 9399 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | CRITICAL 9.0 | 0.8 % | ||
| CVE-2026-71398 | ≤ ACC v7: 7.4.3 build 9399 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | CRITICAL 10.0 | 1.2 % | ||
| CVE-2026-27302 | ≤ ACC v7: 7.4.3 build 9399 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | CRITICAL 10.0 | 1.2 % | ||
| CVE-2026-48323 | ≤ ACC v7: 7.4.3 build 9398 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) | CRITICAL 10.0 | 1.4 % | ||
| CVE-2026-48333 | ≤ ACC v7: 7.4.3 build 9398 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | CRITICAL 9.8 | 0.9 % | ||
| CVE-2026-48317 | ≤ ACC v7: 7.4.3 build 9398 | Adobe Campaign Classic (ACC) | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95) | CRITICAL 9.6 | 0.9 % | ||
| CVE-2026-48331 | ≤ ACC v7: 7.4.3 build 9398 | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) | CRITICAL 10.0 | 0.9 % | ||
| CVE-2026-48399 | ≤ ACC v7: 7.4.3 build 9398 | Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657) | HIGH 7.5 | 0.9 % | ||
| CVE-2026-48330 | ≤ ACC v7: 7.4.3 build 9398 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | CRITICAL 10.0 | 1.0 % | ||
| CVE-2026-48326 | ≤ ACC v7: 7.4.3 build 9398 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | CRITICAL 9.9 | 1.0 % | ||
| CVE-2026-48449 | ≤ 7.4.3 build 9397 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | CRITICAL 10.0 | 0.9 % | ||
| CVE-2026-48448 | ≤ 7.4.3 build 9397 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | HIGH 8.6 | 0.6 % | ||
| CVE-2026-48286 | ≤ ACC v7: 7.4.3 build 9396 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | CRITICAL 10.0 | 1.2 % | ||
| CVE-2026-47938 | ≤ ACC v7: 7.4.3 build 9394 | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) | CRITICAL 10.0 | 0.4 % | ||
| CVE-2026-48303 | ≤ ACC v7: 7.4.3 build 9394 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | CRITICAL 10.0 | 0.6 % | ||
| CVE-2020-9666 | Adobe Campaign Classic versions 20.2 | Adobe Campaign Classic before 20.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. | MEDIUM 5.5 | 2.3 % |