Microstrategy / Microstrategy Web
11 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2020-22983 | A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier, allows remote unauthenticated attackers to conduct a serve… | HIGH | 8.1 | May 13, 2022 |
| CVE-2020-11453 | Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service functionality exposed through the path /MicroStrategyWS/. The funct… | MEDIUM | 5.3 | Apr 2, 2020 |
| CVE-2020-11452 | Microstrategy Web 10.4 includes functionality to allow users to import files or data from external resources such as URLs or databases. By providing an externa… | MEDIUM | 4.3 | Apr 2, 2020 |
| CVE-2020-11450 | Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL /MicroStrategyWS/happyaxis.j… | HIGH | 7.5 | Apr 2, 2020 |
| CVE-2020-11451 | The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary exten… | HIGH | 7.2 | Apr 2, 2020 |
| CVE-2020-11454 | Microstrategy Web 10.4 is vulnerable to Stored XSS in the HTML Container and Insert Text features in the window, allowing for the creation of a new dashboard.… | MEDIUM | 5.4 | Apr 2, 2020 |
| CVE-2019-12453 | In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation. | MEDIUM | 6.1 | Jul 19, 2019 |
| CVE-2019-12475 | In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation. | MEDIUM | 6.1 | Jul 17, 2019 |
| CVE-2018-18777 | Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subpage) allows remote authenticated users… | MEDIUM | 4.3 | Nov 1, 2018 |
| CVE-2018-18776 | Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the admin/admin.… | MEDIUM | 6.1 | Nov 1, 2018 |
| CVE-2018-18775 | Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the Login.asp Ms… | MEDIUM | 6.1 | Nov 1, 2018 |
Showing 1 to 11 of 11 CVEs