CVE-2017-2968 Code injection in Adobe Campaign 16.4 Build 8724 and earlier.
Attackers can execute arbitrary code in Adobe Campaign due to a code injection vulnerability, requiring immediate patching.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-2968?
CVE-2017-2968 is a critical code injection vulnerability in Adobe Campaign 16.4 Build 8724 and earlier., published on 15 Feb 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability.
Weakness: CWE-94
Which versions are affected by CVE-2017-2968?
It affects 1 product.
Products include Adobe Campaign.
How do I fix CVE-2017-2968?
No fix has been published for CVE-2017-2968 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2017-2968 being exploited?
There is no known exploitation of CVE-2017-2968 in the wild and no public exploit code.
Other vulnerabilities in Adobe Campaign 16.4 Build 8724 and earlier.
- CVE-2026-73369 Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-75699 Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-75703 Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-75721 Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-75723 Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Sources
Also known as GHSA-p8f8-pj6v-742r.