Vulnerability Details CVE-2018-18775
Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the Login.asp Msg parameter. NOTE: this is a deprecated product.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.203
EPSS Ranking 95.2%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2018-18775
-
cpe:2.3:a:microstrategy:microstrategy_web:7