Read the docs

Revive-sas

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Revive-sas records in CISA KEV

No Revive-sas vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Revive Adserver 1 record HIGH

Records

1 record in Revive Adserver · all components

TI-2019-03843 CVE-2019-5434 · GHSA-7chh-x9j3-4vhx

Deserialization of untrusted data in Revive Adserver

Priority HIGH 75

An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.57022 Published 2019-05-06 No fix listed CWE-502
Open these records in search →