165 matches found
MicroStrategy Web 10.4 - Information Disclosure
MicroStrategy Web 10.4 is susceptible to information disclosure. The JVM configuration, CPU architecture, installation folder, and other information are exposed through /MicroStrategyWS/happyaxis.jsp. An attacker can use this vulnerability to learn more about the application environment and there...
Microstrategy Web 7 - Cross-Site Scripting
Microstrategy Web 7 does not sufficiently encode user-controlled inputs, resulting in cross-site scripting via the Login.asp Msg parameter. id: CVE-2018-18775 info: name: Microstrategy Web 7 - Cross-Site Scripting author: 0xAkoko severity: medium description: Microstrategy Web 7 does not...
MicroStrategy Library <11.1.3 - Cross-Site Scripting
MicroStrategy Library before 11.1.3 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...
Microstrategy Web 7 - Local File Inclusion
Microstrategy Web 7 is vulnerable to local file inclusion via "/WebMstr7/servlet/mstrWeb" in the parameter subpage. Remote authenticated users can bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used by a web application. NOTE: this i...
CVE-2019-12475
CVE-2019-12475 Stored XSS in MicroStrategy Web prior to 10.4.6 Author: undefinedmode https://github.com/undefinedmode/CVE-2019-12453 Stored XSS in metric and it is triggered when opening the Visual Threshold editor. Reported to vendor in 2017 and fixed quickly in version 10.4.6...
CVE-2019-12453
CVE-2019-12453 CVE-2019-12453 Stored XSS in MicroStrategy Web prior to 10.1 patch 10 Author: undefinedmode https://github.com/undefinedmode/CVE-2019-12453 In MicroStrategy Web prior to version 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation. The FLTB...
CVE-2019-18957
Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS...
EUVD-2020-15739
Malware in sbrugna...
EUVD-2018-10492
Malware in sbrugna...
EUVD-2020-17524
Malware in sbrugna...
EUVD-2020-15741
Malware in sbrugna...
EUVD-2019-4071
Malware in sbrugna...
EUVD-2019-4061
Malware in sbrugna...
EUVD-2020-3805
Malware in sbrugna...
EUVD-2020-3806
Malware in sbrugna...
EUVD-2020-15740
Malware in sbrugna...
EUVD-2019-8625
Malware in sbrugna...
EUVD-2020-15743
Malware in sbrugna...