CVE-2019-12475
Medium
Description
In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation.
SeverityMedium
CVSS6.1
Exploit probability—
ProductMicrostrategy Web
PublishedJul 17, 2019
First seenJul 17, 2019
How to fix
Update
- microstrategy microstrategy_web10.4.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microstrategy microstrategy_web | v < 10.4.6 | 10.4.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.