CVE-2019-7847

Published: Jul 18, 2019Modified: Jun 17, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user.

Affected (1)

Products: Adobe: Campaign

1 product

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Campaign	Up to 18.10.5.8984

Running on/with	Platform Versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (2)

https://helpx.adobe.com/security/products/campaign/apsb19-28.html

Source: psirt@adobe.com

Vendor Advisory

https://helpx.adobe.com/security/products/campaign/apsb19-28.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.