CVE-2015-7371: Revive-Adserver Revive Adserver

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Revive Adserver before 3.2.2 does not restrict access to run-mpe.php, which allows remote attackers to run the Maintenance Priority Engine and possibly cause a denial of service (resource consumption) via a direct request.

Affected products

• Revive-Adserver Revive Adserver: up to and including 3.2.1

Published 2015-10-14. Last modified 2026-06-17.