Spoofing

A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments, aka 'Microsoft Power BI Report Server Spoofing Vulnerability'...

CVE-2020-1173

CVE-2020-1173 : A spoofing vulnerability in Microsoft Power BI Report Server arises from improper validation of the content-type of uploaded attachments. An authenticated attacker could upload a specially crafted payload and execute scripts in the user’s security context, enabling user-interface ...

CVE-2020-1173: Improper Input Validation

A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments. An authenticated attacker could exploit the vulnerability by uploading a specially crafted payload and sending it to the user. The attacker who successfully...

Power Business Intelligence Report Server Installed (Windows)

Binary data microsoftpowerbirswininstalled.nbin...

Security Update for Microsoft Power BI Report Server (May 2020)

A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments. An authenticated attacker could exploit the vulnerability by uploading a specially crafted payload and sending it to the user. The attacker who successfully...

Microsoft Power BI Report Server Spoofing Vulnerability

A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments. An authenticated attacker could exploit the vulnerability by uploading a specially crafted payload and sending it to the user. The attacker who successfully...

PT-2020-2484

Name of the Vulnerable Software and Affected Versions Microsoft Power BI Report Server affected versions not specified Description The issue is related to errors in the representation of information by the user interface. It allows a remote attacker to conduct spoofing attacks. The vulnerability...

KLA11776 SUI vulnerability in Microsoft SQL Server

SUI vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-1173 Exploitation Related products Microsoft-SQL-Server CVE list CVE-2020-1173 warning KB list Solution Install necessary updates from the KB...

SQL Server Reporting Services (SSRS) ViewState Deserialization

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SQL Server Reporting Services SSRS ViewState Deserialization', 'Description' = %q A vulnerability exists within Microsoft's SQL Server Reporting...

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could execute code in the context of the Report Server service account. To exploit the vulnerability, an...

Microsoft SQL Server Reporting Services CVE-2019-1332 Cross Site Scripting Vulnerability

Description Microsoft SQL Server Reporting Services SSRS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality OPERA 5 Property Services Component (CNVD-2019-39707)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

CVE-2018-3013

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: Report Server Config. The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-3013

CVE-2018-3013 details (connected sources) : The vulnerability affects Oracle Hospitality OPERA 5 Property Services, specifically the Report Server Config subcomponent of OPERA 5 Property Services, in Oracle Hospitality Applications. Affected version: 5.5.x. The vulnerability allows a low-privileg...

CVE-2018-3013: Undefined Security Weakness

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: Report Server Config. The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2016-0291

IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302...

Code injection

IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302...

CVE-2016-0291

IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302...

CVE-2016-0291

IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302...

PT-2018-4601

Name of the Vulnerable Software and Affected Versions IBM BigFix Platform versions 9.0, 9.1 through 9.1.7, and 9.2 through 9.2.7 Description The issue allows remote authenticated users to execute arbitrary commands by leveraging report server access. Recommendations For versions 9.0, update to a...