Microstrategy

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Microstrategy records in CISA KEV

No Microstrategy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Microstrategy Web 11 records MEDIUM Microstrategy Web Sdk 4 records LOW Microstrategy 2 records MEDIUM Enterprise Manager 1 record MEDIUM Microstrategy Library 1 record LOW Web Services 1 record MEDIUM

Records

2 records in Microstrategy · all components

TI-2018-13217 CVE-2018-18696 · GHSA-4rv4-2rhp-3qjw

main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF.

MEDIUM 40

main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00846 Published 2018-12-28 No fix listed CWE-352

TI-2020-15199 CVE-2020-24815 · GHSA-73jg-p8q6-m47j

A Server-Side Request Forgery (SSRF) affecting the PDF generation in MicroStrategy 10.4…

LOW 33

A Server-Side Request Forgery (SSRF) affecting the PDF generation in MicroStrategy 10.4, 2019 before Update 6, and 2020 before Update 2 allows authenticated users to access the content of internal network resources or le…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01836 Published 2020-11-24 No fix listed CWE-918

Open these records in search →

Critical	2
High	4
Medium	14
Low	0
No CVSS	0