CVE-2019-1332

CVE-2019-1332: falha em Microsoft Power BI Report Server

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Power BI Report Server+ Monitorar SQL Server 2017 Reporting Services

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 11%
A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'.
Produtos afetados
Microsoft · Power BI Report ServerMicrosoft · SQL Server 2017 Reporting ServicesMicrosoft · SQL Server 2019 Reporting Services
CVEs relacionadas — Microsoft Power BI Report Server

No mesmo produto, das mais perigosas para as menos.

CVE-2020-1173—Microsoft Power BI Report Server Spoofing VulnerabilityEPSS 2.5%CVE-2020-1044MEDIUMSQL Server Reporting Services Security Feature Bypass VulnerabilityEPSS 2.0%CVE-2026-65811HIGHPower BI Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-21229HIGHPower BI Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-58647HIGHMicrosoft PowerBI Report Server Spoofing VulnerabilityEPSS 0.5%