165 matches found
CVE-2019-12475
CVE-2019-12475 Gespeichertes XSS in MicroStrategy Web vor Version 10.4.6 Autor: undefinedmode https://github.com/undefinedmode/CVE-2019-12453 Gespeichertes XSS in Metriken, das beim Öffnen des Visual Threshold Editors ausgelöst wird. Dem Hersteller im Jahr 2017 gemeldet und schnell in Version...
CVE-2019-12453
CVE-2019-12453 CVE-2019-12453 XSS persistente in MicroStrategy Web prima della versione 10.1 patch 10 Autore: undefinedmode https://github.com/undefinedmode/CVE-2019-12453 In MicroStrategy Web prima della versione 10.1 patch 10, è possibile un XSS persistente nel parametro FLTB a causa di una...
MicroStrategy Web 10.4 - Information Disclosure
MicroStrategy Web 10.4 is susceptible to information disclosure. The JVM configuration, CPU architecture, installation folder, and other information are exposed through /MicroStrategyWS/happyaxis.jsp. An attacker can use this vulnerability to learn more about the application environment and there...
MicroStrategy Library <11.1.3 - Cross-Site Scripting
MicroStrategy Library before 11.1.3 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...
Microstrategy Web 7 - Cross-Site Scripting
Microstrategy Web 7 does not sufficiently encode user-controlled inputs, resulting in cross-site scripting via the Login.asp Msg parameter. id: CVE-2018-18775 info: name: Microstrategy Web 7 - Cross-Site Scripting author: 0xAkoko severity: medium description: Microstrategy Web 7 does not...
Microstrategy Web 7 - Local File Inclusion
Microstrategy Web 7 is vulnerable to local file inclusion via "/WebMstr7/servlet/mstrWeb" in the parameter subpage. Remote authenticated users can bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used by a web application. NOTE: this i...
CVE-2019-18957
Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS...
EUVD-2020-15739
Malware in sbrugna...
EUVD-2020-15741
Malware in sbrugna...
EUVD-2018-10492
Malware in sbrugna...
EUVD-2020-17524
Malware in sbrugna...
EUVD-2019-4071
Malware in sbrugna...
EUVD-2019-4061
Malware in sbrugna...
EUVD-2020-3806
Malware in sbrugna...
EUVD-2020-15740
Malware in sbrugna...
EUVD-2020-3808
Malware in sbrugna...
EUVD-2020-3805
Malware in sbrugna...
EUVD-2020-15742
Malware in sbrugna...