CVE-2020-11454: Microstrategy Web

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

Microstrategy Web 10.4 is vulnerable to Stored XSS in the HTML Container and Insert Text features in the window, allowing for the creation of a new dashboard. In order to exploit this vulnerability, a user needs to get access to a shared dashboard or have the ability to create a dashboard on the application.

Affected products

• Microstrategy Microstrategy Web: version 10.4 only

Published 2020-04-02. Last modified 2026-06-17.