Top Highlights
- Adobe Campaign Classic ≤7.4.4 build 9402 has eight critical flaws, including code/OS injection and authorization bypass enabling arbitrary code execution (CVSS up to 9.9).
- Campaign Classic SQL injection flaws can bypass security controls; reflected XSS may enable privilege escalation. Update to build 9403.
- Adobe Connect has a critical code-injection flaw enabling arbitrary code execution across Windows, macOS, and Android; patches are available, with no in-the-wild exploitation reported.
Threat, Attack Techniques, and Targets
Adobe disclosed eight critical vulnerabilities in Campaign Classic. The flaws affect Windows and Linux versions 7.4.4 build 9402 and earlier.
Attack techniques include code injection, operating system code injection, incorrect authorization, SQL injection, and reflected cross site scripting. The vulnerabilities carry CVSS scores from 9.1 to 9.9. Adobe says it has not observed exploitation in the wild.
Impact, Security Implications, and Remediation
If attackers exploit these flaws, they could run arbitrary code, bypass security features, or escalate privileges. Therefore, affected Campaign Classic systems face serious security risks.
Adobe fixed the issues in version 7.4.4 build 9403. Administrators should update affected Windows and Linux systems to that version or later.
Stay Ahead with the Latest Tech Trends
Learn how the Internet of Things (IoT) is transforming everyday life.
Explore past and present digital transformations on the Internet Archive.
ThreatIntel-V1
