PT-2020-12620

Name of the Vulnerable Software and Affected Versions Microstrategy Web version 10.4 Description The issue allows for Stored XSS in the HTML Container and Insert Text features, specifically when creating a new dashboard. To exploit this, an attacker needs access to a shared dashboard or the abili...

MicroStrategy Web Cross-Site Scripting Vulnerability (CNVD-2019-23751)

Microstrategy Web is a set of U.S. Microstrategy's enterprise data analysis platform. The platform features data discovery, data visualization and report generation. A cross-site scripting vulnerability exists in the 'FLTB' parameter in MicroStrategy Web versions prior to 10.1 patch 10. The...

CVE-2019-12453

In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation...

CVE-2019-12453

In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation...

Input validation

In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation...

CVE-2019-12453

In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation...

CVE-2019-12453

CVE-2019-12453 – MicroStrategy Web stored XSS : Affects MicroStrategy Web prior to 10.1 patch 10. The vulnerability is due to missing input validation in the FLTB parameter, enabling stored cross-site scripting. From the connected documents: exploitation is via the FLTB parameter in MicroStrategy...

CVE-2019-12453: Improper Neutralization of Input During Web Page Generation

In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation...

PT-2019-12800

Name of the Vulnerable Software and Affected Versions MicroStrategy Web versions prior to 10.1 patch 10 Description The issue is related to stored XSS, which is possible due to missing input validation in the FLTB parameter. Recommendations For versions prior to 10.1 patch 10, update to version...

CVE-2019-12475

In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation...

CVE-2019-12475

In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation...

Input validation

In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation...

CVE-2019-12475

In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation...

PT-2019-12811

Name of the Vulnerable Software and Affected Versions MicroStrategy Web versions prior to 10.4.6 Description The issue is related to stored XSS in metrics due to insufficient input validation. Recommendations For versions prior to 10.4.6, update to version 10.4.6 or later to resolve the issue...

CVE-2019-12475: Improper Neutralization of Input During Web Page Generation

In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation...

CVE-2018-6885

An issue was discovered in MicroStrategy Web Services the Microsoft Office plugin before 10.4 Hotfix 7, and before 10.11. The vulnerability is unauthenticated and leads to access to the asset files with the MicroStrategy user privileges. This includes the credentials to access the admin dashboard...

CVE-2018-6885

An issue was discovered in MicroStrategy Web Services the Microsoft Office plugin before 10.4 Hotfix 7, and before 10.11. The vulnerability is unauthenticated and leads to access to the asset files with the MicroStrategy user privileges. This includes the credentials to access the admin dashboard...

CVE-2018-6885

The CVE-2018-6885 entry describes an unauthenticated path-traversal vulnerability in MicroStrategy Web Services (the Microsoft Office plugin) prior to 10.4 Hotfix 7 and prior to 10.11. The vulnerability (in a SOAP request within the web service component) allows access to asset files using MicroS...

PT-2019-11033

Name of the Vulnerable Software and Affected Versions: MicroStrategy Web Services versions prior to 10.4 Hotfix 7 MicroStrategy Web Services versions prior to 10.11 Description: The issue allows unauthenticated access to asset files with MicroStrategy user privileges, potentially leading to acces...

CVE-2018-6885: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in MicroStrategy Web Services the Microsoft Office plugin before 10.4 Hotfix 7, and before 10.11. The vulnerability is unauthenticated and leads to access to the asset files with the MicroStrategy user privileges. This includes the credentials to access the admin dashboard...