Browse CVEs

HIGH 8.1 CVE-2020-22983 A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier, allows remote unauthenticated attackers to condu… Microstrategy Web after 11.1 Fix from $1,9502022-05-13 MEDIUM 6.1 CVE-2020-22985 Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary cod… Microstrategy Web Sdk after 10.11 Fix from $1,6002022-05-12 MEDIUM 6.1 CVE-2020-22986 Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary cod… Microstrategy Web Sdk after 10.11 Fix from $1,6002022-05-12 MEDIUM 6.1 CVE-2020-22987 Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary cod… Microstrategy Web Sdk after 10.11 Fix from $1,6002022-05-12 MEDIUM 6.1 CVE-2020-22984 Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary cod… Microstrategy Web Sdk after 10.11 Fix from $1,6002022-05-12 CRITICAL 9.8 CVE-2022-29596 MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../.… Enterprise Manager No fix yet Fix from $2,3002022-05-11 MEDIUM 6.5 CVE-2020-24815 A Server-Side Request Forgery (SSRF) affecting the PDF generation in MicroStrategy 10.4, 2019 before Update 6, and 2020 before Update 2 allows authen… Microstrategy No fix yet Fix from $1,6002020-11-24 MEDIUM 5.3 CVE-2020-11453 Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service functionality exposed through the path /MicroStrategyWS/.… Microstrategy Web Patch available Fix from $1,6002020-04-02 HIGH 7.5 CVE-2020-11450EPSS 18% Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL /MicroStrategyWS/h… Microstrategy Web 11.0+ Fix from $1,9502020-04-02 HIGH 7.2 CVE-2020-11451 The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbit… Microstrategy Web after 10.4 Fix from $1,9502020-04-02 MEDIUM 5.4 CVE-2020-11454 Microstrategy Web 10.4 is vulnerable to Stored XSS in the HTML Container and Insert Text features in the window, allowing for the creation of a new d… Microstrategy Web Patch available Fix from $1,6002020-04-02 MEDIUM 6.1 CVE-2019-18957 Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS. Microstrategy Library 11.1.3+ Fix from $1,6002019-11-14 MEDIUM 6.1 CVE-2019-12453 In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation. Microstrategy Web after 10.1 Fix from $1,6002019-07-19 MEDIUM 6.1 CVE-2019-12475 In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation. Microstrategy Web 10.4.6+ Fix from $1,6002019-07-17 CRITICAL 9.8 CVE-2018-6885 An issue was discovered in MicroStrategy Web Services (the Microsoft Office plugin) before 10.4 Hotfix 7, and before 10.11. The vulnerability is unau… Web Services 10.4 / 10.11+ Fix from $2,3002019-05-14 HIGH 8.8 CVE-2018-18696 main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF. NOTE: The vendor claims that documentation for preventing a CSRF attack has… Microstrategy after 10.4.0026.0049 Fix from $1,9502018-12-28 MEDIUM 6.1 CVE-2018-18775EPSS 8% Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the Lo… Microstrategy Web No fix yet Fix from $1,6002018-11-01 MEDIUM 6.1 CVE-2018-18776 Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the ad… Microstrategy Web No fix yet Fix from $1,6002018-11-01