CVE-2019-12453

6.1 mediumEPSS 1.0%

Medium (6.1) in microstrategy microstrategy web. EPSS 1.0% chance of exploitation in the next 30 days.

In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation.

Severity

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-07-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19