163 matches found
Microstrategy Web 7 - Local File Inclusion
Microstrategy Web 7 is vulnerable to local file inclusion via "/WebMstr7/servlet/mstrWeb" in the parameter subpage. Remote authenticated users can bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used by a web application. NOTE: this i...
MicroStrategy Web 10.4 - Information Disclosure
MicroStrategy Web 10.4 is susceptible to information disclosure. The JVM configuration, CPU architecture, installation folder, and other information are exposed through /MicroStrategyWS/happyaxis.jsp. An attacker can use this vulnerability to learn more about the application environment and there...
Microstrategy Web 7 - Cross-Site Scripting
Microstrategy Web 7 does not sufficiently encode user-controlled inputs, resulting in cross-site scripting via the Login.asp Msg parameter. id: CVE-2018-18775 info: name: Microstrategy Web 7 - Cross-Site Scripting author: 0xAkoko severity: medium description: Microstrategy Web 7 does not...
MicroStrategy Library <11.1.3 - Cross-Site Scripting
MicroStrategy Library before 11.1.3 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...
CVE-2019-18957
Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS...
EUVD-2020-15739
Malware in sbrugna...
EUVD-2019-4071
Malware in sbrugna...
EUVD-2020-17524
Malware in sbrugna...
EUVD-2019-4061
Malware in sbrugna...
EUVD-2020-15741
Malware in sbrugna...
EUVD-2018-10492
Malware in sbrugna...
EUVD-2019-8625
Malware in sbrugna...
EUVD-2018-18630
Malware in sbrugna...
EUVD-2020-3805
Malware in sbrugna...
EUVD-2020-15743
Malware in sbrugna...
EUVD-2020-15740
Malware in sbrugna...
EUVD-2020-15742
Malware in sbrugna...
EUVD-2020-3808
Malware in sbrugna...