← Back

CVE-2026-47938

nvd nist
Published: Jun 9, 2026Modified: Aug 28, 2026

JSON object

Loading...
10.0
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 6.0
Source: psirt@adobe.com (Secondary)

Description

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Affected (2)

Products: Adobe: Campaign
Adobe
1 product
Campaign
Configuration A
2 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Adobe
Campaign
Up to 7.4.2
Campaign
Version 7.4.3 9394
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-918
Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (1)

Source: psirt@adobe.com
Vendor Advisory

Timeline

No history available yet.