CVE-2024-45754

An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to...

Security Update for Microsoft Power BI Report Server (October 2024)

The Microsoft Power BI Report Server on the remote host is missing the October 2024 security update. It is, therefore, affected by a server spoofing vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Vulnerabilities fixed in Microsoft SQL Server Power BI Report Server

Microsoft fixed vulnerabilities in SQL Server Power BI Report Server A malicious party could exploit the vulnerabilities to impersonate another user and execute arbitrary code under their context, possibly with administrator privileges. Successful exploitation requires the malicious party to have...

CVE-2024-43612

Power BI Report Server Spoofing Vulnerability...

CVE-2024-43612

Power BI Report Server Spoofing Vulnerability...

CVE-2024-43481

Power BI Report Server Spoofing Vulnerability...

CVE-2024-43481

Power BI Report Server Spoofing Vulnerability...

CVE-2024-43612

CVE-2024-43612 affects Microsoft Power BI Report Server. The issue is described as a server-side spoofing vulnerability that could allow an attacker to impersonate a user and influence the user interface, potentially enabling remote code execution under the attacker’s context in some disclosures....

CVE-2024-43612 Power BI Report Server Spoofing Vulnerability

...

CVE-2024-43612 Power BI Report Server Spoofing Vulnerability

...

CVE-2024-43481 Power BI Report Server Spoofing Vulnerability

...

CVE-2024-43481 Power BI Report Server Spoofing Vulnerability

...

CVE-2024-43481

CVE-2024-43481 affects Power BI Report Server with a spoofing vulnerability in the server UI. Affected component: Power BI Report Server; root cause details are not fully enumerated in the provided documents, but the issue is identified as a server spoofing vulnerability with high impact per CVSS...

Power BI Report Server Spoofing Vulnerability

...

Power BI Report Server Spoofing Vulnerability

...

CVE-2024-37179

SA P BusinessObjects BI Platform Web Intelligence is affected by an authenticated-file-download vulnerability. A logged-in user can send a crafted request to the Web Intelligence Reporting Server to download arbitrary files from the host machine, exposing confidentiality without impacting integri...

PT-2024-6806 · Microsoft · Power Bi Report Server

Name of the Vulnerable Software and Affected Versions: Power BI Report Server versions affected versions not specified Description: The issue is related to the Power BI Report Server, where a lack of proper web page structure protection can be exploited. This can allow a remote attacker to perfor...

KLA73909 SUI vulnerabilities in Microsoft SQL Server

A spoofing user interface vulnerabilities was found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to spoof user interface. Original advisories CVE-2024-43481 CVE-2024-43612 Related products Microsoft-Power-BI CVE list CVE-2024-43481 high CVE-2024-43612 high Solution...

PT-2024-6990 · Microsoft · Power Bi Report Server

Name of the Vulnerable Software and Affected Versions: Power BI Report Server affected versions not specified Description: The issue is related to the Power BI Report Server and involves a lack of protection for the web page structure, potentially allowing a remote attacker to perform cross-site...

Microsoft Power BI Report Server 跨站脚本漏洞

Microsoft Power BI Report Server is a server-side application for the management and sharing of business analytics reports from Microsoft Corporation USA. A cross-site scripting vulnerability exists in Microsoft Power BI Report Server that stems from the presence of a spoofing vulnerability...