10.4.6

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-13	CVE-2020-22983	Server-Side Request Forgery (SSRF) vulnerability in Microstrategy web A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier, allows remote unauthenticated attackers to conduct a server-side request forgery (SSRF) attack via the srcURL parameter to the shortURL task. network low complexity microstrategy CWE-918	8.1
2020-04-02	CVE-2020-11450	Unspecified vulnerability in Microstrategy web Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL /MicroStrategyWS/happyaxis.jsp. network low complexity microstrategy	7.5