https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-7094.htmlhttps://patchthecve.com/cve/CVE-2008-7094.htmlTue, 16 Jun 2026 23:03:35 +0000MEDIUM 5.0: Campaign/CampaignListener in the listener server in Unica Affinium Campaign 7.2.1.0.55 allows remote attackers to cause a denial of service (server crash) via a crafted length field that triggers (1) connection exhaustion or (2) memory allocation failure.https://patchthecve.com/cve/CVE-2008-7093.htmlhttps://patchthecve.com/cve/CVE-2008-7093.htmlTue, 16 Jun 2026 23:03:35 +0000MEDIUM 6.8: Multiple directory traversal vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote attackers to (1) create arbitrary directories or files via a .. (dot dot) in the folder name in the new folder functionality or (2) list arbitrary files via a crafted request to Campaign/CampaignListener.https://patchthecve.com/cve/CVE-2008-7092.htmlhttps://patchthecve.com/cve/CVE-2008-7092.htmlTue, 16 Jun 2026 23:03:34 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote attackers to inject arbitrary web script or HTML via a Javascript event in the (1) url, (2) PageName, and (3) title parameters in a CustomBookMarkLink action to Campaign/Campaign; (4) a Javascript