Known vulnerabilities in Revive Adserver

Software CPE: cpe:2.3:a:openx_source:revive_adserver:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Revive Adserver Revive Adserver is affected by 10 known vulnerabilities: 1 critical, 4 high, 1 medium, 4 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30316 - Cross-Site Request Forgery (CSRF)
CVE-2020-8143
CWE-352 Medium
No
No
5.0.5 03.04.2020 SB2020040324
#VU24934 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-8115
CWE-79 Low
No
No
5.0.4 05.02.2020 SB2020020504
#VU31058 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2019-5440
CWE-338 High
No
No
4.2.1 28.05.2019 SB2019052814
#VU35941 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-5433
CWE-601 Low
No
No
4.2.0 06.05.2019 SB2019050635
#VU35942 - Deserialization of Untrusted Data
CVE-2019-5434
CWE-502 High
Available
No
4.2.0 06.05.2019 SB2019050635
#VU39350 - Security Features
CVE-2016-9470
CWE-254 High
No
No
- 28.03.2017 SB2017032813
#VU39351 - Improper input validation
CVE-2016-9471
CWE-20 Low
No
No
- 28.03.2017 SB2017032813
#VU39352 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9472
CWE-79 Low
No
No
- 28.03.2017 SB2017032813
#VU4383 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4211
CWE-94 Critical
Available
No
- 12.01.2017 SB2013080601
#VU4352 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-7149
CWE-89 High
No
No
- 12.01.2017 SB2013122002