CVE-2019-7847 in Campaign

Riassunto

di MITRE

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 12/02/2019
• Moderazione: accettato
• Voce: VDB-136356
• CPE: pronto
• CWE: CWE-611 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.03251
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-7847
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-7847
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-7847/