Lucene search
+L

5 matches found

OSV
OSV
•added 2022/05/12 8:15 p.m.•15 views

CVE-2020-22985

Cross-Site Scripting XSS vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the key parameter to the getESRIExtraConfig task...

6.1CVSS6.1AI score0.01669EPSS
SaveExploits0References4
NVD
NVD
•added 2022/05/12 8:15 p.m.•28 views

CVE-2020-22985

Cross-Site Scripting XSS vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the key parameter to the getESRIExtraConfig task...

6.1CVSS0.01669EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/05/12 7:58 p.m.•38 views

CVE-2020-22985

Cross-Site Scripting XSS vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the key parameter to the getESRIExtraConfig task...

6.1AI score0.01669EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/05/12 12:00 a.m.•18 views

MicroStrategy Web SDK 跨站脚本漏洞

The MicroStrategy Web SDK is a JavaScript library from MicroStrategy, Inc. Interact with different CARTO APIs to build custom applications that utilize vector rendering on top of deck.gl. A cross-site scripting vulnerability exists in MicroStrategy Web SDK version 10.11 and prior versions, which...

6.1CVSS6.4AI score0.01669EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/12 12:00 a.m.•7 views

CVE-2020-22985: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the key parameter to the getESRIExtraConfig task...

6.1CVSS6.9AI score0.01669EPSS
SaveExploits0References4
Rows per page
Query Builder