Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-55123) - Vulnerability Database

ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-55123)

Description

Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.

References

CVE-2025-55123

Related Vulnerabilities

OpenSSL CVE-2021-4160 Vulnerability (CVE-2021-4160) Medium
Common tags: Missing Update Known Vulnerabilities
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1148) Medium
Common tags: Missing Update Known Vulnerabilities
SharePoint Improper Input Validation Vulnerability (CVE-2020-1025) Critical
Common tags: Missing Update Known Vulnerabilities
SharePoint NULL Pointer Dereference Vulnerability (CVE-2020-1069) High
Common tags: Missing Update Known Vulnerabilities
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1099) Medium
Common tags: Missing Update Known Vulnerabilities

Severity

Medium

Classification

CVE-2025-55123
CWE-707
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update
Known Vulnerabilities