CVE-2015-7368
Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in...
Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin UI pages, which allows local users to obtain sensitive information via the web browser cache.
Exploit likelihood
What each source reports
NVD Score used
Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin UI pages, which allows local users to obtain sensitive information via the web browser cache.
- Record
CVE-2015-7368- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin UI pages, which allows local users to obtain sensitive information via the web browser cache.
- Record
CVE-2015-7368- Updated
- 2026-11-02
EUVDEUVD-2015-7292 No score
Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin UI pages, which allows local users to obtain sensitive information via the web browser cache.
- Record
EUVD-2015-7292- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r549-wwpp-pwm2 No score
Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in...
Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin UI pages, which allows local users to obtain sensitive information via the web browser cache.
- Record
GHSA-r549-wwpp-pwm2- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-7368 is a low vulnerability (CVSS 2.1) in Revive-adserver Revive Adserver, published October 14, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.54%, the 45th percentile. No source names a fixed version.
References
revive-adserver.com/security/revive-sa-2015-001
securityfocus.com/archive/1/536633/100/0/threaded
seclists.org/fulldisclosure/2015/Oct/32
github.com/revive-adserver/revive-adserver/commit/15aac363
packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html
nvd.nist.gov/vuln/detail/CVE-2015-7368