PT-2025-44562 · Unknown · Revive Adserver 6.0.0

Published 2025-10-30 · Updated 2025-12-01 · CVE-2025-52664

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Revive Adserver version 6.0.0

Description A SQL injection issue exists in Revive Adserver 6.0.0. This can lead to potential disruption or unauthorized information access when specifically crafted payloads are submitted by authenticated users. The issue involves the submission of malicious SQL queries through the application, potentially allowing attackers to manipulate database operations. The vulnerability is triggered when logged-in users send specifically crafted payloads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-52664

Affected Products

Revive Adserver 6.0.0

References · 8

• https://osv.dev/vulnerability/CVE-2025-52664 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52664 · Security Note
• http://seclists.org/fulldisclosure/2025/Oct/21 · Patch
• https://hackerone.com/reports/3395221 · Patch
• https://twitter.com/CVEnew/status/1984108371696623949 · Twitter Post
• https://t.me/CVEtracker/36254 · Telegram Post
• https://t.me/cveNotify/144460 · Telegram Post
• https://twitter.com/CveFindCom/status/1984058188606394531 · Twitter Post