Revive Adserver vulnerabilities, page 2

23 vulnerabilities

Known vulnerabilities in Revive Adserver, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1MediumCVE-2026-21663aquaplatform · revive_adserver +1 moreaquaplatform revive_adserverHackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the banner-acl.php script of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent to the browser and malicious scripts would be executed.EPSS0.20%7.1HighCVE-2026-21641aquaplatform · revive_adserver +1 moreaquaplatform revive_adserverHackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability in the `tracker-delete.php` script of Revive Adserver. Users with permissions to delete trackers are mistakenly allowed to delete trackers owned by other accounts.EPSS0.27%6.1MediumCVE-2023-38040revive-adserver · revive_adserver +1 morerevive-adserver revive_adserverA reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions..EPSS2.07%