High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-13	CVE-2020-22983	Server-Side Request Forgery (SSRF) vulnerability in Microstrategy web A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier, allows remote unauthenticated attackers to conduct a server-side request forgery (SSRF) attack via the srcURL parameter to the shortURL task. network low complexity microstrategy CWE-918	8.1
2020-04-02	CVE-2020-11451	Unrestricted Upload of File with Dangerous Type vulnerability in Microstrategy web 10.1/10.4/7 The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary extensions and data. network low complexity microstrategy CWE-434	7.2
2020-04-02	CVE-2020-11450	Unspecified vulnerability in Microstrategy web Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL /MicroStrategyWS/happyaxis.jsp. network low complexity microstrategy	7.5