CVE-2020-11454

Name of the Vulnerable Software and Affected Versions Microstrategy Web version 10.4

Description The issue allows for Stored XSS in the HTML Container and Insert Text features, specifically when creating a new dashboard. To exploit this, an attacker needs access to a shared dashboard or the ability to create a dashboard on the application.

Recommendations For Microstrategy Web version 10.4, consider restricting access to the HTML Container and Insert Text features until a fix is available, and limit the ability to create or share dashboards to trusted users.