Adobe Commerce and Magento Incorrect Authorization Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security…
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Apply mitigations in accordance with vendor instructions,…
Adobe Campaign Classic is a marketing campaign management solution. It has been the target of multiple critical vulnerabilities, including authorization flaws and…
Adobe Commerce is an e-commerce platform. A recent vulnerability allowed privilege escalation due to incorrect authorization.
Adobe has released security updates addressing multiple critical vulnerabilities in ColdFusion, Commerce, and Campaign Classic. The most severe include three CVSS 10.0…
A CVSS 9.9 eval injection vulnerability in Adobe ColdFusion that could lead to arbitrary code execution. Fixed in versions 2025.0.12 and 2023.0.23.
A CVSS 9.6 incorrect authorization vulnerability in Adobe ColdFusion that could cause application denial-of-service. Fixed in versions 2025.0.12 and 2023.0.23.
A CVSS 9.0 SQL injection vulnerability in Adobe Campaign Classic that could lead to arbitrary code execution. Fixed in ACC v7 7.4.4…
Adobe ColdFusion is a commercial rapid web application development platform. Recent updates address critical vulnerabilities including command injection and eval injection.
Adobe has released security updates to address a maximum-severity vulnerability in Campaign Classic (ACC), its enterprise marketing automation platform. The flaw, tracked…