Lack of transparency in the Microsoft Power BI server

Microsoft has identified a vulnerability in the Power BI server. A malicious individual could exploit this vulnerability to execute arbitrary code on the server. For successful exploitation, the malicious individual must have access to prior authentication. Microsoft has provided updates that...

EUVD-2009-5055

Malware in sbrugna...

EUVD-2009-5054

Malware in sbrugna...

EUVD-2018-10289

Malware in sbrugna...

EUVD-2009-5056

Malware in sbrugna...

CVE-2024-45754

An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to...

CVE-2024-45754

An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to...

Centreon BI Server 安全漏洞

Centreon BI Server is an IT monitoring platform from Centreon. A security vulnerability exists in versions of Centreon BI Server prior to 24.04.3, which stems from improper handling of inputs when configuring a list of reporting tasks and is vulnerable to SQL injection attacks...

CVE-2024-45754

An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to...

CVE-2024-45754

An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to...

PT-2024-31750 · Centreon · Centreon Bi Server

Name of the Vulnerable Software and Affected Versions: Centreon BI Server versions 24.04.x through 24.04.2 Centreon BI Server versions 23.10.x through 23.10.7 Centreon BI Server versions 23.04.x through 23.04.10 Centreon BI Server versions 22.10.x through 22.10.10 Description: An issue was...

CVE-2024-45754

An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to...

CVE-2024-45754: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to...

CVE-2024-45754

A SQL injection vulnerability exists in the centreon-bi-server component of Centreon BI Server . The flaw stems from improper handling of inputs when listing configured reporting jobs. This vulnerability is only accessible to authenticated users with high-privileged access . Affected versions inc...

CVE-2024-43481

Power BI Report Server Spoofing Vulnerability...

Server side request forgery (ssrf)

The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests with certain restrictions that will be executed on behalf of the attacker, via the viewUrl parameter of the "export the dashboard as an image" feature. Th...

CVE-2018-18569

The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests with certain restrictions that will be executed on behalf of the attacker, via the viewUrl parameter of the "export the dashboard as an image" feature. Th...

CVE-2018-18569

The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests with certain restrictions that will be executed on behalf of the attacker, via the viewUrl parameter of the "export the dashboard as an image" feature. Th...

CVE-2018-18569: Server-Side Request Forgery (SSRF)

The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests with certain restrictions that will be executed on behalf of the attacker, via the viewUrl parameter of the "export the dashboard as an image" feature. Th...

PT-2019-9604

Name of the Vulnerable Software and Affected Versions Dundas BI server versions prior to 5.0.1.1010 Description The issue allows an attacker to perform a Server-Side Request Forgery attack, enabling them to forge arbitrary requests that will be executed on their behalf. This is achieved via the...