Revive Adserver Team · Revive Adserver · CVE-2016-9472
**Name of the Vulnerable Software and Affected Versions**
Revive Adserver versions prior to 3.2.5
Revive Adserver versions prior to 4.0.0
**Description**
The issue concerns a reflected XSS attack. The Revive Adserver web installer scripts are vulnerable to this attack via parameters such as `dbHost` and `dbUser`. The window for such attack vectors is extremely narrow, making it unlikely for an attack to be effective.
**Recommendations**
For Revive Adserver versions prior to 3.2.5, update to version 3.2.5 or later.
For Revive Adserver versions prior to 4.0.0, update to version 4.0.0 or later.