Microsoft Power BI Report Server
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:power_bi_report_server:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Power Bi Report Server (9bac4963-ec00-5096-93b8-03ee745f8c4a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-31984 |
vulnerable | 2026-06-08 05:31:54.537408 |
Power BI Remote Code Execution Vulnerability
HIGH (7.6)
Power BI Remote Code Execution Vulnerability
Published: 2021-07-14T17:53:17.000Z
Updated: 2026-08-10T15:10:56.674Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1173 |
vulnerable | 2026-06-08 05:20:58.693515 |
Microsoft Power BI Report Server Spoofing Vulnerability
A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments. An authenticated attacker could exploit the vulnerability by uploading a specially crafted payload and sending it to the user.
The attacker who successfully exploited this vulnerability could then perform actions and run scripts in the security context of the user.
This security update addresses the vulnerability by ensuring Power BI Report Server properly validates content-type of the attachments when uploading and opening.
Published: 2020-05-21T22:53:30.000Z
Updated: 2026-08-19T16:34:15.386Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1332 |
vulnerable | 2026-06-08 05:13:25.655784 |
Details available
A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'.
Published: 2019-12-10T21:40:56.000Z
Updated: 2024-08-04T18:13:30.447Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.