CVE-2022-29596

9.8 criticalEPSS 2.2%

Critical (9.8) in microstrategy enterprise manager. EPSS 2.2% chance of exploitation in the next 30 days.

MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../windows/win.ini%00.jpg&Pwd=_any_password_&ConnMode=1&3054=Login substring for directory traversal.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2022-05-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microstrategy:enterprise_manager

References

https://github.com/haxpunk1337/Microstrategy-Poc/blob/main/poc
https://github.com/haxpunk1337/Microstrategy-Poc/blob/main/poc

Check your stack JSON