CVE-2019-1332

CVE-2019-1332: fallo en Microsoft Power BI Report Server

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Power BI Report Server+ Monitorear SQL Server 2017 Reporting Services

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 11%
A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'.
Productos afectados
Microsoft · Power BI Report ServerMicrosoft · SQL Server 2017 Reporting ServicesMicrosoft · SQL Server 2019 Reporting Services
CVEs relacionadas — Microsoft Power BI Report Server

En el mismo producto, de las más peligrosas a las menos.

CVE-2020-1173—Microsoft Power BI Report Server Spoofing VulnerabilityEPSS 2.5%CVE-2020-1044MEDIUMSQL Server Reporting Services Security Feature Bypass VulnerabilityEPSS 2.0%CVE-2026-65811HIGHPower BI Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-21229HIGHPower BI Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-58647HIGHMicrosoft PowerBI Report Server Spoofing VulnerabilityEPSS 0.5%