PatchTheCVEmicrostrategy vulnerabilities and fixes
Recent CVEs affecting microstrategy, with upgrade or downgrade steps. 2 tracked.
microstrategy has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-11-24. Highest priority: CVE-2018-18696 (score 50/100).
- CVE-2020-24815 MEDIUM 6.5 DOWNGRADE A Server-Side Request Forgery (SSRF) affecting the PDF generation in MicroStrategy 10.4, 2019 before Update 6,
- CVE-2018-18696 HIGH 8.8 UPGRADE main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF
FAQ
How do I fix microstrategy vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is microstrategy being exploited right now?
None of the tracked microstrategy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which microstrategy CVE should I patch first?
CVE-2018-18696 currently ranks highest (50/100): main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF.