Lucene search
K

6 matches found

CNVD
CNVD
added 2018/11/02 12:0 a.m.2 views

Microstrategy Web Cross-Site Scripting Vulnerability

MicroStrategy Web is a highly interactive, easy-to-use application for report analysis and continuous business monitoring. A cross-site scripting vulnerability exists in Microstrategy Web 7. The vulnerability stems from Microstrategy Web failing to adequately encode user-controlled input. The...

6.1CVSS5.9AI score0.00296EPSS
Exploits5References1
Prion
Prion
added 2018/11/01 5:29 p.m.9 views

Cross site scripting

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the admin/admin.asp ShowAll parameter. NOTE: this is a deprecated product...

4.3CVSS5.9AI score0.00296EPSS
Exploits5References2Affected Software1
OSV
OSV
added 2018/11/01 5:29 p.m.0 views

CVE-2018-18776

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the admin/admin.asp ShowAll parameter. NOTE: this is a deprecated product...

6.1CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2018/11/01 5:29 p.m.11 views

CVE-2018-18776

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the admin/admin.asp ShowAll parameter. NOTE: this is a deprecated product...

6.1CVSS6AI score0.00296EPSS
Exploits5References2
Cvelist
Cvelist
added 2018/11/01 5:0 p.m.12 views

CVE-2018-18776

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the admin/admin.asp ShowAll parameter. NOTE: this is a deprecated product...

6AI score0.00296EPSS
Exploits5References2
CVE
CVE
added 2018/11/01 5:0 p.m.63 views

CVE-2018-18776

CVE-2018-18776 concerns MicroStrategy Web 7, where an XSS vulnerability arises because input is not sufficiently encoded. The issue is exploitable via the admin/admin.asp ShowAll parameter, enabling a cross-site scripting attack. The product is deprecated, and multiple external sources (including...

6.1CVSS5.9AI score0.00296EPSS
Exploits5References2Affected Software1
Rows per page
Query Builder