Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2020-22987

Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the fileToUpload parameter to the uploadFile task.

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Microstrategy
Products
Microstrategy Web Sdk
CVE-2020-22986

Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the searchString parameter to the wikiScrapper task.

CVSS 3.1 · 6.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Microstrategy
Products
Microstrategy Web Sdk
CVE-2020-22984

Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via key parameter to the getGoogleExtraConfig task.

CVSS 3.1 · 6.1 Medium EPSS 1.7% KEV · Not listed
Vendors
Microstrategy
Products
Microstrategy Web Sdk
CVE-2020-22985

Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the key parameter to the getESRIExtraConfig task.

CVSS 3.1 · 6.1 Medium EPSS 1.7% KEV · Not listed
Vendors
Microstrategy
Products
Microstrategy Web Sdk