CVE-2016-9471
CVE-2016-9471 is a low-severity vulnerability in Revive-adserver Revive Adserver with a CVSS 3.x base score of 3.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-75.
Key facts
- Severity: Low (CVSS 3.x base score 3.1)
- CVSS v2: 2.1
- EPSS exploit prediction: 1% (69th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-75
- Affected product: Revive-adserver Revive Adserver
- Published:
- Last modified:
Description
Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the fact that such characters are normally ignored when an HTML page is displayed in a browser. The issue could have therefore been exploited for user spoofing, although elevated privileges are required to create users within Revive Adserver.
Frequently asked questions
- What is CVE-2016-9471?
- Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the fact that such characters are normally ignored when an HTML page is displayed in a browser. The issue could have therefore been exploited for user spoofing, although elevated privileges are required to create users within Revive Adserver.
- How severe is CVE-2016-9471?
- CVE-2016-9471 has a CVSS 3.x base score of 3.1, rated low severity. It is exploitable over network with high attack complexity, requires high privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.
- Is CVE-2016-9471 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (69th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2016-9471?
- CVE-2016-9471 primarily affects Revive-adserver Revive Adserver. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2016-9471?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2016-9471 published?
- CVE-2016-9471 was published on 2017-03-28 and last updated on 2026-06-17.
References
- https://github.com/revive-adserver/revive-adserver/commit/05b1eceb
- https://hackerone.com/reports/128181
- https://www.revive-adserver.com/security/revive-sa-2016-002/
Affected products (2)
- cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*
- cpe:2.3:a:revive-adserver:revive_adserver:4.0.0:*:*:*:*:*:*:*
More vulnerabilities in Revive-adserver Revive Adserver
- CVE-2016-9125 — Critical (CVSS 9.8): Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and,…
- CVE-2016-9124 — Critical (CVSS 9.8): Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login page of…
- CVE-2017-5830 — Critical (CVSS 9.8): Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies…
- CVE-2016-9470 — Critical (CVSS 9.0): Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. `www/delivery/asyncspc.php` was vulnerable…
- CVE-2026-50741 — High (CVSS 8.8): Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix…
- CVE-2025-48986 — High (CVSS 8.8): Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change…
All CVEs affecting Revive-adserver Revive Adserver →
Other CWE-75 vulnerabilities
- CVE-2026-29042 — Critical (CVSS 9.8): Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.15.20, the Nuclio Shell…
- CVE-2025-50213 — Critical (CVSS 9.8): Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow…
- CVE-2024-35373 — Critical (CVSS 9.8): Mocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php.
- CVE-2021-22910 — Critical (CVSS 9.8): A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an…
- CVE-2021-22911 — Critical (CVSS 9.8): A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to…
- CVE-2026-31908 — Critical (CVSS 9.1): Header injection vulnerability in Apache APISIX. The attacker can take advantage of certain configuration in…