CVE-2026-48330Inyección SQL en Adobe Campaign Classic
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the application. Exploitation of this issue does not require user interaction. Scope is changed.
Ver en NVDAnálisis
Adobe Campaign Classic presenta una vulnerabilidad crítica de inyección SQL que permite la ejecución de código arbitrario sin requerir interacción del usuario. Un atacante puede ejecutar comandos SQL para obtener acceso elevado o control total sobre la infraestructura de la aplicación. Al tener el puntaje máximo de severidad (CVSS 10.0), requiere atención inmediata por parte de los equipos que operan esta plataforma.
Roles relevantes
Severidad
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCWE-89EPSS
Sin puntaje EPSS aún (CVE muy reciente).
Descripción técnica
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the application. Exploitation of this issue does not require user interaction. Scope is changed.