Microstrategy Web Security Vulnerabilities and Issues — Microstrategy Web CVE List

Lucene search

MicrostrategyMicrostrategy Web

3 matches found

CVE•added 2018/11/01 5:29 p.m.•61 views

CVE-2018-18777

Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subpage) allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash dot dot) in a pathname used by a web applicatio...

4.3CVSS4.6AI score0.69525EPSS

CVE•added 2018/11/01 5:29 p.m.•56 views

CVE-2018-18775

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the Login.asp Msg parameter. NOTE: this is a deprecated product.

6.1CVSS5.9AI score0.2032EPSS

CVE•added 2018/11/01 5:29 p.m.•55 views

CVE-2018-18776

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the admin/admin.asp ShowAll parameter. NOTE: this is a deprecated product.

6.1CVSS5.9AI score0.00296EPSS