Microstrategy Web Security Vulnerabilities and Issues — Microstrategy Web CVE List

Lucene search

MicrostrategyMicrostrategy Web

4 matches found

CVE•added 2019/07/19 5:15 p.m.•140 views

CVE-2019-12453

In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation.

6.1CVSS5.8AI score0.0021EPSS

CVE•added 2018/11/01 5:29 p.m.•56 views

CVE-2018-18775

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the Login.asp Msg parameter. NOTE: this is a deprecated product.

6.1CVSS5.9AI score0.2032EPSS

CVE•added 2018/11/01 5:29 p.m.•55 views

CVE-2018-18776

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the admin/admin.asp ShowAll parameter. NOTE: this is a deprecated product.

6.1CVSS5.9AI score0.00296EPSS

CVE•added 2019/07/17 5:15 p.m.•35 views

CVE-2019-12475

In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation.

6.1CVSS5.8AI score0.0021EPSS