Lucene search

K

Microstrategy Web Sdk Security Vulnerabilities

cve
cve

CVE-2020-22984

Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via key parameter to the getGoogleExtraConfig task.

6.1CVSS

6.1AI Score

0.003EPSS

2022-05-12 08:15 PM
45
6
cve
cve

CVE-2020-22985

Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the key parameter to the getESRIExtraConfig task.

6.1CVSS

6.1AI Score

0.003EPSS

2022-05-12 08:15 PM
30
5
cve
cve

CVE-2020-22986

Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the searchString parameter to the wikiScrapper task.

6.1CVSS

6.1AI Score

0.003EPSS

2022-05-12 08:15 PM
36
6
cve
cve

CVE-2020-22987

Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the fileToUpload parameter to the uploadFile task.

6.1CVSS

6.1AI Score

0.003EPSS

2022-05-12 08:15 PM
30
5