CVE-2020-22984

MEDIUM 6.1CVE-2020-22984 · Published 12/05/2022 · updated 09/07/2026

In short

CVE-2020-22984 is a MEDIUM (CVSS 6.1) vulnerability affecting microstrategy web sdk (microstrategy).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
microstrategy web sdk microstrategy	`≤ 10.11`	No fix yet

Description

Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via key parameter to the getGoogleExtraConfig task.

References

More vulnerabilities in microstrategy web sdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

microstrategy web sdk

microstrategy

≤ 10.11

No fix yet

More vulnerabilities in microstrategy web sdk

See all →