Total
6 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-21806 | 1 Microsoft | 1 Power Bi Report Server | 2023-02-23 | N/A | 8.2 HIGH |
Power BI Report Server Spoofing Vulnerability | |||||
CVE-2019-1332 | 1 Microsoft | 3 Power Bi Report Server, Sql Server 2017 Reporting Services, Sql Server 2019 Reporting Services | 2023-02-01 | 4.3 MEDIUM | 6.1 MEDIUM |
A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'. | |||||
CVE-2021-41372 | 1 Microsoft | 1 Power Bi Report Server | 2021-11-12 | 6.8 MEDIUM | 9.6 CRITICAL |
Power BI Report Server Spoofing Vulnerability | |||||
CVE-2021-31984 | 1 Microsoft | 1 Power Bi Report Server | 2021-07-16 | 6.8 MEDIUM | 8.8 HIGH |
Power BI Remote Code Execution Vulnerability | |||||
CVE-2021-26859 | 1 Microsoft | 1 Power Bi Report Server | 2021-03-17 | 4.0 MEDIUM | 6.5 MEDIUM |
Microsoft Power BI Information Disclosure Vulnerability | |||||
CVE-2020-1173 | 1 Microsoft | 1 Power Bi Report Server | 2020-05-27 | 3.5 LOW | 6.8 MEDIUM |
A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments, aka 'Microsoft Power BI Report Server Spoofing Vulnerability'. |