CVE-2015-7369: Revive-Adserver Revive Adserver

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors.

Affected products

• Revive-Adserver Revive Adserver: up to and including 3.2.1

Published 2015-10-14. Last modified 2026-06-17.