RE
Product
revive-adserver
67
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 9Medium 37Low 2
Watch
Add revive-adserver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-50741 | 8.8 | Jun 26 | Bypass to the fix for CVE-2026-34916 Affected: before 6.0.8 |
| CVE-2026-34916 | 8.8 | Jun 23 | A missing validation of user input when saving delivery limitations in Revive Adserver 6.0.6 and earlier could allow a low‑privileged user to use the logical parameter to inject… Affected: through 6.0.6 |
| CVE-2025-48986 | 8.8 | Nov 20 | Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy take over their… Affected: through 5.5.2; 6.0.0 through 6.0.1 |
| CVE-2025-52664 | 8.8 | Oct 30 | SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payloads are sent by logged in users Affected: 6.0.0 |
| CVE-2016-9456 | 8.8 | Mar 28 | Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF) Affected: through 3.2.2 |
| CVE-2016-9455 | 8.8 | Mar 28 | Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF) Affected: through 3.2.2 |
| CVE-2016-9127 | 8.8 | Mar 28 | Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF) Affected: through 3.2.2 |
| CVE-2019-5440 | 8.1 | May 28 | Use of cryptographically weak PRNG in the password recovery token generation of Revive Adserver < v4.2.1 causes a potential authentication bypass attack if an attacker exploits… Affected: before 4.2.1 |
| CVE-2021-22948 | 7.1 | Sep 23 | Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() PHP function Affected: before 5.3.0; 5.3.0 |
Showing 9