Microsoft SQL Server 2017 Reporting Services

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:sql_server_2017_reporting_services:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductSql Server 2017 Reporting Services (3c561caf-c4db-5524-ae51-fa61710451e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-1044 vulnerable 2026-06-08 05:20:57.870704 SQL Server Reporting Services Security Feature Bypass Vulnerability
MEDIUM (4.3)
<p>A security feature bypass vulnerability exists in SQL Server Reporting Services (SSRS) when the server improperly validates attachments uploaded to reports. An attacker who successfully exploited this vulnerability could upload file types that were disallowed by an administrator.</p> <p>To exploit the vulnerability, an authenticated attacker would need to send a specially crafted request to an affected SSRS server.</p> <p>The update addresses the vulnerability by modifying how SSRS validates attachment uploads.</p>
Published: 2020-09-11T17:08:54.000Z
Updated: 2024-08-04T06:25:00.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1332 vulnerable 2026-06-08 05:13:25.656487 Details available
A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'.
Published: 2019-12-10T21:40:56.000Z
Updated: 2024-08-04T18:13:30.447Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.