CVE-2016-9454CWE-79

Revive Adserver before 3.2.3 suffers from Persistent XSS

published March 28, 2017

CVSS
—
EPSS
1%
Percentile
65.2
In the wild
Unconfirmed
What it is

Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via the Revive Adserver user interface exists, requiring a trusted (non-admin) account. The banner image URL for external banners wasn't properly escaped when displayed in most of the banner related pages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01102 · 65.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2017-03-28T02:46Z
EPSS history
Timeline
  • 28 MAR 02:46Z
    Revive Adserver before 3.2.3 suffers from Persistent XSS
    cvelistv5