CVE-2025-55123

Summary

Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.

Affected Software

VendorProductVersion RangeStatus
ReviveRevive Adserver6 <= 6.0.1affected
ReviveRevive Adserver5 <= 5.5.2affected
ReviveRevive Adserver6.0.2 <= 6.0.2unaffected
ReviveRevive Adserver5.5.3 <= 5.5.3unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

Additional References

References