Vulnerabilities > CVE-2019-7847 - XXE vulnerability in Adobe Campaign

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

adobe

CWE-611

NVD

Published: 2019-07-18

Updated: 2019-07-21

Summary

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user.

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Campaign - Adobe Campaign 7.2.1 Adobe Campaign 7.2.2 Adobe Campaign 7.3.1 Adobe Campaign 7.3.2 Adobe Campaign 8.0.0 Adobe Campaign 8.1.14 Adobe Campaign 8.1.20 Adobe Campaign 8.2.8 Adobe Campaign 8.2.10 Adobe Campaign 8.3.8 Adobe Campaign 8.3.9 Adobe Campaign 8.4.1 Adobe Campaign 8.4.2 Adobe Campaign 18.10.5.8984	15
OS	Linux Linux Linux Kernel -	1
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-611 - Improper Restriction of XML External Entity Reference ('XXE')

References

https://helpx.adobe.com/security/products/campaign/apsb19-28.html