CVE-2020-11450

Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL…

published April 2, 2020

CVSS

—

EPSS

18%

Percentile

97.2

In the wild

Unconfirmed

What it is

Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL /MicroStrategyWS/happyaxis.jsp. An attacker could use this vulnerability to learn more about the environment the application is running in. This issue has been mitigated in all versions of the product 11.0 and higher.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.17841 · 97.2th percentile
Published: 2020-04-02T15:01Z

EPSS history

Timeline

02 APR 15:01Z
Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL…
cvelistv5