Vulnerability Details CVE-2019-12475
In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.8%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- https://community.microstrategy.com/s/article/Defects-and-Enhancements-Addressed-in-MicroStrategy-10-4-6-Secure-Enterprise-Platform?language=en_US
- https://github.com/undefinedmode/CVE-2019-12475
- https://community.microstrategy.com/s/article/Defects-and-Enhancements-Addressed-in-MicroStrategy-10-4-6-Secure-Enterprise-Platform?language=en_US
- https://github.com/undefinedmode/CVE-2019-12475
Products affected by CVE-2019-12475
-
cpe:2.3:a:microstrategy:microstrategy_web:-
-
cpe:2.3:a:microstrategy:microstrategy_web:10.1
-
cpe:2.3:a:microstrategy:microstrategy_web:10.4
-
cpe:2.3:a:microstrategy:microstrategy_web:7