Medium severity6.1NVD Advisory· Published Nov 1, 2018· Updated Jun 17, 2026
CVE-2018-18776
CVE-2018-18776
Description
Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the admin/admin.asp ShowAll parameter. NOTE: this is a deprecated product.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:microstrategy:microstrategy_web:7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microstrategy:microstrategy_web:7:*:*:*:*:*:*:*
- (no CPE)range: 7
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/150059/Microstrategy-Web-7-Cross-Site-Scripting-Traversal.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/45755/nvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.