Security readout for executives and security teams
Plain-English summary
CVE-2019-7846 is an information disclosure issue in Adobe Campaign Classic. The public record says improper error handling could expose information available to the current user. The bundle does not include a CVSS score, severity rating, exploit detail, or confirmed active exploitation.
Executive priority
Treat this as a targeted exposure check, not a confirmed emergency. If Adobe Campaign Classic is in use, assign ownership to verify versions and follow Adobe’s advisory. Business urgency rises if affected systems handle sensitive customer or campaign data.
Technical view
Adobe Campaign Classic version 18.10.5-8984 and earlier are listed as affected. The weakness is described only as improper error handling leading to information disclosure in the current user context. No CWE, CVSS vector, affected component path, or remediation details are provided in the supplied bundle.
Likely exposure
Exposure is limited to organizations running Adobe Campaign Classic 18.10.5-8984 or earlier. The record does not identify cloud-only exposure, authentication requirements, affected modules, or required privileges beyond the current user context.
Exploitation context
The source bundle does not show CISA KEV listing or cited evidence of active exploitation. It also does not provide exploit mechanics, public proof-of-concept status, or attack prerequisites.
Researcher notes
Evidence is sparse. The record supports affected product/version and impact class only. Do not infer unauthenticated access, remote exploitability, exploit maturity, or fixed versions from this bundle alone.
Mitigation direction
- Review Adobe APSB19-28 for official remediation guidance.
- Inventory Adobe Campaign Classic deployments and versions.
- Prioritize any instance at 18.10.5-8984 or earlier for vendor-guided action.
- Use Adobe support guidance before relying on compensating controls.
Validation and detection
- Confirm deployed Adobe Campaign Classic version numbers.
- Check whether any instance is 18.10.5-8984 or earlier.
- Review Adobe advisory APSB19-28 for affected-version mapping.
- Document remediation status and any vendor exceptions.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2019-7846 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://helpx.adobe.com/security/products/campaign/apsb19-28.htmlCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.