{"id":"CVE-2019-7847","aliases":["EUVD-2019-17375","GHSA-2qp9-4ph2-cj5q"],"status":"published","title":"Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of...","description":"Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03251,"percentile":0.88424,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-611"],"published":"2019-07-18T21:44:23Z","modified":"2026-06-17T02:41:07Z","products":[{"vendor":"adobe","product":"campaign"}],"references":[{"url":"https://helpx.adobe.com/security/products/campaign/apsb19-28.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7847"},{"url":"https://github.com/advisories/GHSA-2qp9-4ph2-cj5q"}],"sources":{"cve":[{"id":"CVE-2019-7847","description":"Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user.","status":"published","published":"2019-07-18T21:44:23Z","modified":"2024-08-04T21:02:18.996Z","updated_at":"2026-11-02T14:32:22.432545Z"}],"euvd":[{"id":"EUVD-2019-17375","description":"Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user.","status":"published","published":"2019-07-18T21:44:23Z","modified":"2024-08-04T21:02:18Z","updated_at":"2026-11-03T03:06:45.033254Z"}],"ghsa":[{"id":"GHSA-2qp9-4ph2-cj5q","title":"Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of...","description":"Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user.","status":"published","published":"2022-05-24T16:50:46Z","modified":"2024-04-04T01:19:25Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:55:57.302483Z"}],"nvd":[{"id":"CVE-2019-7847","description":"Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user.","status":"published","published":"2019-07-18T22:15:12.37Z","modified":"2026-06-17T02:41:07.26Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:05:20.616405Z"}]}}