CVE-2024-43612

Power BI Report Server Spoofing Vulnerability...

CVE-2024-43481

Power BI Report Server Spoofing Vulnerability...

CVE-2024-43481

Power BI Report Server Spoofing Vulnerability...

CVE-2024-43612 Power BI Report Server Spoofing Vulnerability

...

CVE-2024-43612 Power BI Report Server Spoofing Vulnerability

...

CVE-2024-43612

CVE-2024-43612 affects Microsoft Power BI Report Server. The issue is described as a server-side spoofing vulnerability that could allow an attacker to impersonate a user and influence the user interface, potentially enabling remote code execution under the attacker’s context in some disclosures....

CVE-2024-43481 Power BI Report Server Spoofing Vulnerability

...

CVE-2024-43481 Power BI Report Server Spoofing Vulnerability

...

CVE-2024-43481

CVE-2024-43481 affects Power BI Report Server with a spoofing vulnerability in the server UI. Affected component: Power BI Report Server; root cause details are not fully enumerated in the provided documents, but the issue is identified as a server spoofing vulnerability with high impact per CVSS...

Power BI Report Server Spoofing Vulnerability

...

Power BI Report Server Spoofing Vulnerability

...

CVE-2024-37179

SA P BusinessObjects BI Platform Web Intelligence is affected by an authenticated-file-download vulnerability. A logged-in user can send a crafted request to the Web Intelligence Reporting Server to download arbitrary files from the host machine, exposing confidentiality without impacting integri...

Microsoft Power BI 跨站脚本漏洞

Microsoft Power BI is an interactive data visualization software from Microsoft USA that focuses on business intelligence. It is part of the Microsoft Power Platform. A cross-site scripting vulnerability exists in Microsoft Power BI. An attacker exploits this vulnerability to perform spoofing...

Microsoft Power BI Report Server 跨站脚本漏洞

Microsoft Power BI Report Server is a server-side application for the management and sharing of business analytics reports from Microsoft Corporation USA. A cross-site scripting vulnerability exists in Microsoft Power BI Report Server that stems from the presence of a spoofing vulnerability...

KLA73909 SUI vulnerabilities in Microsoft SQL Server

A spoofing user interface vulnerabilities was found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to spoof user interface. Original advisories CVE-2024-43481 CVE-2024-43612 Related products Microsoft-Power-BI CVE list CVE-2024-43481 high CVE-2024-43612 high Solution...

PT-2024-6990 · Microsoft · Power Bi Report Server

Name of the Vulnerable Software and Affected Versions: Power BI Report Server affected versions not specified Description: The issue is related to the Power BI Report Server and involves a lack of protection for the web page structure, potentially allowing a remote attacker to perform cross-site...

PT-2024-6806 · Microsoft · Power Bi Report Server

Name of the Vulnerable Software and Affected Versions: Power BI Report Server versions affected versions not specified Description: The issue is related to the Power BI Report Server, where a lack of proper web page structure protection can be exploited. This can allow a remote attacker to perfor...

SAP BusinessObjects Business Intelligence Platform Improper Authorization (3479478)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote host is prior to 4.3 SP004 000600 or 4.3 SP005 000000. It is, therefore, affected by a vulnerability as referenced in the 3479478 advisory. - In SAP BusinessObjects Business Intelligence Platform, if Single...

VulnCheck KEV: CVE-2019-2767

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. The supported version that is affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2024-45281

CVE-2024-45281 affects SAP BusinessObjects BI Platform. It describes a DLL hijacking vulnerability where a high-privilege local user can cause client desktop applications to run using unsigned or broken DLLs, compromising confidentiality and integrity. Local access is required; impact is high for...