Adobe Systems Inc. Adobe Campaign Classic

Name: Adobe Systems Inc. Adobe Campaign Classic
Brand: Adobe Systems Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

15critical6high2medium0low

updated 2026-10-28

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-40745US	high7.5	3.72% (90th)	—	no fix	2021-11-17	≤ 21.2.1
CVE-2026-76197US	critical10.0	3.50% (89th)	—	no fix	2026-08-25	≤ 7 7.4.4 build 9401
CVE-2026-76195US	critical10.0	3.50% (89th)	—	no fix	2026-08-25	≤ 7 7.4.4 build 9401
CVE-2026-82004US	critical10.0	3.25% (88th)	—	no fix	2026-09-08	≤ 7 7.4.4 build 9402
CVE-2019-7843US	high7.5	3.21% (88th)	—	no fix	2019-07-18	≤ 19.1.4-9031
CVE-2019-7848US	high7.5	3.12% (88th)	—	no fix	2019-07-18	≤ 19.1.4-9031
CVE-2019-7846US	high7.5	3.12% (88th)	—	no fix	2019-07-18	≤ 19.1.4-9031
CVE-2021-21009US	medium5.0	3.05% (88th)	—	no fix	2021-01-13	6 versions
CVE-2020-9666US	medium5.5	2.27% (83rd)	—	no fix	2020-06-25	≤ 20.2
CVE-2022-42343US	—	1.47% (74th)	—	no fix	2022-12-16	2 versions
CVE-2026-76193US	critical10.0	1.28% (70th)	—	no fix	2026-08-25	≤ 7 7.4.4 build 9401
CVE-2026-89275US	critical10.0	1.25% (69th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-75721US	critical10.0	1.25% (69th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-75699US	critical10.0	1.25% (69th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-73369US	critical10.0	1.25% (69th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-84412US	—	1.25% (69th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-75703US	—	1.25% (69th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-75723US	—OT elevated	1.17% (67th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-71398US	—OT elevated	1.17% (67th)	—	no fix	2026-08-11	≤ 7 7.4.4 build 9400
CVE-2026-48286US	—OT elevated	1.17% (67th)	—	no fix	2026-06-30	≤ 7.4.3 build 9397
CVE-2019-7849US	high7.5	1.15% (67th)	—	no fix	2019-08-02	≤ 19.1.4-9031
CVE-2026-75728US	critical9.1OT elevated	1.04% (64th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-82009US	critical9.1	0.99% (62nd)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-82013US	critical9.9	0.82% (57th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-82443US	critical9.9	0.80% (56th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-48381US	—	0.78% (56th)	—	no fix	2026-08-11	≤ 7 7.4.4 build 9400
CVE-2026-83660US	critical10.0	0.78% (56th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-82011US	critical9.1	0.55% (46th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-48303US	—OT elevated	0.55% (46th)	—	no fix	2026-06-09	≤ 7.4.3 build 9396
CVE-2026-82008US	—	0.53% (45th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-89276US	critical9.9	0.53% (44th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-82003US	high8.5	0.46% (40th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401
CVE-2026-47938US	—OT elevated	0.45% (39th)	—	no fix	2026-06-09	≤ 7.4.3 build 9396
CVE-2026-82010US	—	0.43% (37th)	—	no fix	2026-09-22	≤ 7.4.4 build 9401

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-918Server-Side Request Forgery (SSRF)7 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')7 CVEs
CWE-863Incorrect Authorization6 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan