CVE-2017-2969

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
6.1MEDIUM
EPSS
1.2%
top 20.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Campaign
Timeline
PublishedFeb 15
Latest updateMay 17

Description

Adobe Campaign versions 16.4 Build 8724 and earlier have a cross-site scripting (XSS) vulnerability.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5adobe_campaign_16.4_build_8724_and_earlier.Adobe Campaign 16.4 Build 8724 and earlier.
▶NVDadobe/campaign16.4

🔴Vulnerability Details

2
GHSA
GHSA-jg4r-76mc-wh32: Adobe Campaign versions 16↗2022-05-17
▶
CVEList
CVE-2017-2969: Adobe Campaign versions 16↗2017-02-15
▶
CVE-2017-2969 (MEDIUM CVSS 6.1) | Adobe Campaign versions 16.4 Build | cvebase.io