165 matches found
MicroStrategy Web 10.4 - Information Disclosure
MicroStrategy Web 10.4 is susceptible to information disclosure. The JVM configuration, CPU architecture, installation folder, and other information are exposed through /MicroStrategyWS/happyaxis.jsp. An attacker can use this vulnerability to learn more about the application environment and there...
MicroStrategy Library <11.1.3 - Cross-Site Scripting
MicroStrategy Library before 11.1.3 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...
Microstrategy Web 7 - Local File Inclusion
Microstrategy Web 7 is vulnerable to local file inclusion via "/WebMstr7/servlet/mstrWeb" in the parameter subpage. Remote authenticated users can bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used by a web application. NOTE: this i...
Microstrategy Web 7 - Cross-Site Scripting
Microstrategy Web 7 does not sufficiently encode user-controlled inputs, resulting in cross-site scripting via the Login.asp Msg parameter. id: CVE-2018-18775 info: name: Microstrategy Web 7 - Cross-Site Scripting author: 0xAkoko severity: medium description: Microstrategy Web 7 does not...
CVE-2019-12475
CVE-2019-12475 MicroStrategy Web 10.4.6 之前版本中的存储型 XSS 作者：undefinedmode https://github.com/undefinedmode/CVE-2019-12453 指标中存在存储型 XSS，在打开可视化阈值编辑器时触发。2017 年向供应商报告，并在 10.4.6 版本中快速修复。...
CVE-2019-12453
CVE-2019-12453 CVE-2019-12453 MicroStrategy Web 10.1补丁10之前版本中的存储型XSS漏洞 作者: undefinedmode https://github.com/undefinedmode/CVE-2019-12453 在MicroStrategy Web 10.1补丁10之前的版本中，由于缺少输入验证，FLTB参数中存在存储型XSS漏洞。该FLTB参数在整个应用程序中使用。...
CVE-2019-18957
Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS...
EUVD-2020-15739
Malware in sbrugna...
EUVD-2020-15741
Malware in sbrugna...
EUVD-2020-17524
Malware in sbrugna...
EUVD-2019-4071
Malware in sbrugna...
EUVD-2018-10492
Malware in sbrugna...
EUVD-2019-4061
Malware in sbrugna...
EUVD-2020-15743
Malware in sbrugna...
EUVD-2019-8625
Malware in sbrugna...
EUVD-2020-15740
Malware in sbrugna...
EUVD-2020-15742
Malware in sbrugna...
EUVD-2018-18630
Malware in sbrugna...