CVE-2020-11451: Microstrategy Web

High severity, CVSS 7.2. EPSS: 2.7% chance of exploitation in the next 30 days.

The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary extensions and data. (This is also exploitable via SSRF). Note: The ability to upload visualization plugins requires administrator privileges.

Affected products

• Microstrategy Microstrategy Web: up to and including 10.4

Published 2020-04-02. Last modified 2026-06-17.