Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-07-17	CVE-2019-12475	Cross-site Scripting vulnerability in Microstrategy web 10.1/10.4/7 In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation. network low complexity microstrategy CWE-79	6.1
2018-11-01	CVE-2018-18777	Path Traversal vulnerability in Microstrategy web 7 Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subpage) allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. network low complexity microstrategy CWE-22	4.3
2018-11-01	CVE-2018-18776	Cross-site Scripting vulnerability in Microstrategy web 7 Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the admin/admin.asp ShowAll parameter. network low complexity microstrategy CWE-79	6.1
2018-11-01	CVE-2018-18775	Cross-site Scripting vulnerability in Microstrategy web 7 Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the Login.asp Msg parameter. network low complexity microstrategy CWE-79	6.1