Arialsoftware Campaign Enterprise — known CVE vulnerabilities

Every CVE whose affected-product data names Arialsoftware Campaign Enterprise, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2012-3820 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to…
• CVE-2012-3822 — CVSS 7.5 (high): Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate…
• CVE-2012-3823 — CVSS 7.5 (high): Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved.
• CVE-2012-3824 — CVSS 7.5 (high): In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization.
• CVE-2012-3821 — CVSS 4.3 (medium): A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote…