medium6.1
CVE-2019-12475
In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation.
Impact
In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microstrategy | Microstrategy Web | before 10.4.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://community.microstrategy.com/s/article/Defects-and-Enhancements-Addressed-in-MicroStrategy-10-4-6-Secure-Enterprise-Platform?language=en_US
- https://github.com/undefinedmode/CVE-2019-12475
- https://community.microstrategy.com/s/article/Defects-and-Enhancements-Addressed-in-MicroStrategy-10-4-6-Secure-Enterprise-Platform?language=en_US
- https://github.com/undefinedmode/CVE-2019-12475