Microstrategy vulnerabilities

Products

• Web 11
• Web Sdk 4
• Microstrategy 2

Newest

• microstrategy web A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and... CVE-2020-22983 8.1 HighMay 13, 2022
• microstrategy web sdk Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows... CVE-2020-22985 6.1 MediumMay 12, 2022
• microstrategy web sdk Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows... CVE-2020-22986 6.1 MediumMay 12, 2022
• microstrategy web sdk Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows... CVE-2020-22987 6.1 MediumMay 12, 2022
• microstrategy web sdk Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows... CVE-2020-22984 6.1 MediumMay 12, 2022
• microstrategy enterprise manager MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure... CVE-2022-29596 9.8 CriticalMay 11, 2022
• microstrategy A Server-Side Request Forgery (SSRF) affecting the PDF generation in MicroStrategy 10.4, 2019... CVE-2020-24815 Public exploit 6.5 MediumNovember 24, 2020
• microstrategy web Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service... CVE-2020-11453 Disputed 5.3 MediumApril 2, 2020
• microstrategy web Microstrategy Web 10.4 includes functionality to allow users to import files or data from... CVE-2020-11452 4.3 MediumApril 2, 2020
• microstrategy web Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and... CVE-2020-11450 EPSS 20.2% 7.5 HighApril 2, 2020
• microstrategy web The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator... CVE-2020-11451 7.2 HighApril 2, 2020
• microstrategy web Microstrategy Web 10.4 is vulnerable to Stored XSS in the HTML Container and Insert Text features... CVE-2020-11454 5.4 MediumApril 2, 2020
• microstrategy library Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS. CVE-2019-18957 6.1 MediumNovember 14, 2019
• microstrategy web In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to... CVE-2019-12453 Public exploit 6.1 MediumJuly 19, 2019
• microstrategy web In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input... CVE-2019-12475 Public exploit 6.1 MediumJuly 17, 2019
• microstrategy web services An issue was discovered in MicroStrategy Web Services (the Microsoft Office plugin) before 10.4... CVE-2018-6885 9.8 CriticalMay 14, 2019
• microstrategy ** DISPUTED ** main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF. NOTE:... CVE-2018-18696 Disputed 8.8 HighDecember 28, 2018
• microstrategy web Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb"... CVE-2018-18777 Public exploit EPSS 22.8% 4.3 MediumNovember 1, 2018
• microstrategy web Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a... CVE-2018-18776 Public exploit 6.1 MediumNovember 1, 2018
• microstrategy web Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a... CVE-2018-18775 Public exploit 6.1 MediumNovember 1, 2018