CVE-2023-21806

Power BI Report Server Spoofing Vulnerability...

CVE-2023-21806

Power BI Report Server Spoofing Vulnerability...

CVE-2023-21806

Power BI Report Server Spoofing Vulnerability...

Spoofing

Power BI Report Server Spoofing Vulnerability...

CVE-2023-21806 Power BI Report Server Spoofing Vulnerability

...

CVE-2023-21806 Power BI Report Server Spoofing Vulnerability

...

CVE-2023-21806

CVE-2023-21806 is a spoofing vulnerability in Microsoft Power BI Report Server. Public sources indicate an authenticated, remote attacker could exploit it by deceiving a user into opening a malicious file on the server, enabling credential exposure or UI spoofing leading to privilege escalation. ...

KB5023884 - Description of the security update for Power BI Report Server: January 2023

None None...

Power BI Report Server Spoofing Vulnerability

...

CVE-2023-23856

In SAP BusinessObjects Business Intelligence Web Intelligence user interface - version 430, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On...

CVE-2023-0020

SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. On successful exploitation, there could be a high impact on confidentiality and limited impact on integrity of the application...

CVE-2023-0020

SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. On successful exploitation, there could be a high impact on confidentiality and limited impact on integrity of the application...

Design/Logic Flaw

In SAP BusinessObjects Business Intelligence Web Intelligence user interface - version 430, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On...

Design/Logic Flaw

SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. On successful exploitation, there could be a high impact on confidentiality and limited impact on integrity of the application...

CVE-2023-0020

CVE-2023-0020 affects SAP BusinessObjects BI Platform versions 4.2 (420) and 4.3 (430). An authenticated attacker can access information that is normally restricted, resulting in high confidentiality impact and limited integrity impact as described in multiple sources. The connected reports consi...

Microsoft Power BI 安全漏洞

Microsoft Power BI is an interactive data visualization software from Microsoft USA that focuses on business intelligence. It is part of the Microsoft Power Platform. A security vulnerability exists in Microsoft Power BI. No information about this vulnerability is available at this time, so stay...

PT-2023-1422 · Microsoft · Power Bi Report Server

Name of the Vulnerable Software and Affected Versions: Power BI Report Server affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It may allow a remote attacker to conduct spoofing attacks. Recommendations: At the...

Vulnerabilities fixed in Microsoft SQL Server

Microsoft has fixed vulnerabilities in SQL Server and Power BI. An authenticated malicious person could exploit the vulnerabilities to execute arbitrary code, possibly with permissions from the server process itself. SQL Server: |----------------|------|-------------------------------------| | CV...

PT-2023-19678 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform CMC versions 420, 430 Description: The issue allows an authenticated admin user to upload malicious code that can be executed by the application over the network. On successful exploitation, ...

KLA20230 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SQL Server can be exploited remotely t...