CVE-2016-9472

low-risk
Published 2017-03-28

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web installer scripts were vulnerable to a reflected XSS attack via the dbHost, dbUser, and possibly other parameters. It has to be noted that the window for such attack vectors to be possible is extremely narrow and it is very unlikely that such an attack could be actually effective.

Do I need to act?

-
0.38% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.4/10 Medium
NETWORK / LOW complexity

Affected Products (2)

Affected Vendors

Revive-Adserver

References (8)

Permissions Required https://github.com/revive-adserver/revive-adserver/commit/14ff73f0
Patch https://github.com/revive-adserver/revive-adserver/commit/fcf72c8a
Permissions Required https://hackerone.com/reports/170156
Patch https://www.revive-adserver.com/security/revive-sa-2016-002/
Permissions Required https://github.com/revive-adserver/revive-adserver/commit/14ff73f0
Patch https://github.com/revive-adserver/revive-adserver/commit/fcf72c8a
Permissions Required https://hackerone.com/reports/170156
Patch https://www.revive-adserver.com/security/revive-sa-2016-002/
29
/ 100
low-risk
Severity 21/34 · High
Exploitability 1/34 · Minimal
Exposure 7/34 · Low