CVE-2019-12453: Microstrategy Web

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation.

Affected products

• Microstrategy Microstrategy Web: up to and including 10.1

Published 2019-07-19. Last modified 2026-06-17.