WordPress Power BI Embedded for WordPress Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Software Power BI Embedded for WordPress Type Plugin Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37959 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d71cfc52b95c Credits Joshua Chan Required...

CVE-2024-34684

CVE-2024-34684 affects SAP BusinessObjects Business Intelligence Platform (Scheduling) on Unix. An authenticated attacker with local administrator access can access the password of a local account, enabling retrieval of non-administrative credentials and allowing read/modify of remote server file...

The vulnerability relates to the collection of tools and libraries used for data processing and report rendering in Power BI client JS SDK. It stems from insufficient validation of input data, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the tools and libraries used for data processing and report rendering in Power BI client JS SDK is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using specially create...

Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability

Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability...

GHSA-WCHX-RM6H-7JF6 Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability

Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability...

Improper Input Validation

Overview Microsoft.PowerBI.JavaScript is a suite of JavaScript web components for integrating Power BI into your app. Affected versions of this package are vulnerable to Improper Input Validation via the client-side data handling process. An attacker can expose sensitive information by intercepti...

CVE-2024-30054

Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability...

CVE-2024-30054 Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability

...

CVE-2024-30054

CVE-2024-30054 concerns the Microsoft.PowerBI.JavaScript NuGet package, specifically versions prior to 2.23.1, which are vulnerable to an information disclosure via user interaction. The Nessus plugin cites a

CVE-2024-30054 Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability

...

Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability

...

CVE-2024-28165 Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application...

Microsoft Power BI 输入验证错误漏洞

Microsoft Power BI is an interactive data visualization software from Microsoft USA that focuses on business intelligence. It is part of the Microsoft Power Platform. Please stay tuned to CNNVD or the vendor bulletin for information about an input validation error vulnerability in Microsoft Power...

PT-2024-3751

Name of the Vulnerable Software and Affected Versions: Microsoft Power BI Client JavaScript SDK affected versions not specified Description: The issue is related to insufficient input validation in the Power BI client JS SDK, which can be exploited by a remote attacker to gain unauthorized access...

The vulnerability of the Script Engine component of the Oracle BI Publisher software allows a perpetrator to execute arbitrary code.

The vulnerability of the Script Engine component of the Oracle BI Publisher reporting software lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2024-21084

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Service Gateway. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Whil...

CVE-2024-21082

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: XML Services. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher...

CVE-2024-21083

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Script Engine. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle BI Publisher...

CVE-2024-21082

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: XML Services. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher...

CVE-2024-21083

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Script Engine. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle BI Publisher...