Microstrategy Web vulnerabilities

• microstrategy web A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and... CVE-2020-22983 8.1 HighMay 13, 2022
• microstrategy web sdk Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows... CVE-2020-22985 6.1 MediumMay 12, 2022
• microstrategy web sdk Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows... CVE-2020-22986 6.1 MediumMay 12, 2022
• microstrategy web sdk Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows... CVE-2020-22987 6.1 MediumMay 12, 2022
• microstrategy web sdk Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows... CVE-2020-22984 6.1 MediumMay 12, 2022
• microstrategy web Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service... CVE-2020-11453 Disputed 5.3 MediumApril 2, 2020
• microstrategy web Microstrategy Web 10.4 includes functionality to allow users to import files or data from... CVE-2020-11452 4.3 MediumApril 2, 2020
• microstrategy web Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and... CVE-2020-11450 EPSS 20.2% 7.5 HighApril 2, 2020
• microstrategy web The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator... CVE-2020-11451 7.2 HighApril 2, 2020
• microstrategy web Microstrategy Web 10.4 is vulnerable to Stored XSS in the HTML Container and Insert Text features... CVE-2020-11454 5.4 MediumApril 2, 2020
• microstrategy web In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to... CVE-2019-12453 Public exploit 6.1 MediumJuly 19, 2019
• microstrategy web In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input... CVE-2019-12475 Public exploit 6.1 MediumJuly 17, 2019
• microstrategy web Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb"... CVE-2018-18777 Public exploit EPSS 22.8% 4.3 MediumNovember 1, 2018
• microstrategy web Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a... CVE-2018-18776 Public exploit 6.1 MediumNovember 1, 2018
• microstrategy web Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a... CVE-2018-18775 Public exploit 6.1 MediumNovember 1, 2018