Security Advisory

CVE-2020-11454

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-04-02 14:58:59
Last updated 2024-08-04 11:28:14
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Microstrategy Web 10.4 is vulnerable to Stored XSS in the HTML Container and Insert Text features in the window, allowing for the creation of a new dashboard. In order to exploit this vulnerability, a user needs to get access to a shared dashboard or have the ability to create a dashboard on the application.