9.1crit
CVE-2017-2989
Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
9.1
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.7%
percentile 90%
Public exploits
0
none known
Summary
Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database.
Exploit prediction (EPSS)
3.69% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- n/a Adobe Campaign Build 8770 and earlier.
Classification
- Weakness
- CWE-20 Improper Input Validation
References
- helpx.adobe.com /security/products/campaign/apsb17-09.html · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/97552 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-2989
- NVD: CVE-2017-2989
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.