Revive Adserver 6.0.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:revive-adserver:revive_adserver:6.0.0:-:*:*:*:*:*:*

part: a version: 6.0.0 update: -

VendorRevive Adserver (089288dc-eb18-57d1-84e4-acc6b9700f8f)
ProductRevive Adserver (9d30695b-4619-5d6e-851a-51f3a660e4a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/revive-adserver/revive-adserver purl2cpe 2026-06-01 10:15:55.542837

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-55123 vulnerable 2026-06-08 07:33:14.088501 Details available
LOW (3.5)
Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.
Published: 2025-11-20T19:10:15.783Z
Updated: 2025-11-20T21:40:47.974Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52671 vulnerable 2026-06-08 07:31:12.845812 Details available
MEDIUM (4.3)
Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use.
Published: 2025-11-20T19:10:15.756Z
Updated: 2025-11-20T21:41:36.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52664 vulnerable 2026-06-08 07:31:12.839529 Details available
HIGH (8.8)
SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payloads are sent by logged in users
Published: 2025-10-30T23:29:22.906Z
Updated: 2025-12-01T20:03:14.842Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.