Yüksek CVSS 8.6
CVE-2026-48448: Campaign: SQL enjeksiyonu
Açıklama (NVD)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issue does not require user interaction. Scope is changed.
Özet bilgiler
- Ürün
- Adobe Campaign
- CVSS v3.1
- 8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - EPSS
- %0,56 (yüzdelik 46)
- CWE
- CWE-89
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| adobe-campaign | — | 7.4.2 | — |
| adobe-campaign | 7.4.3 | 7.4.3 | — |
| adobe-campaign | 7.4.3 | 7.4.3 | — |
| adobe-campaign | 7.4.3 | 7.4.3 | — |
| adobe-campaign | 7.4.3 | 7.4.3 | — |