1646 matches found
CVE-2021-26859
Microsoft Power BI Information Disclosure Vulnerability...
Information disclosure
Microsoft Power BI Information Disclosure Vulnerability...
CVE-2021-26859 Microsoft Power BI Information Disclosure Vulnerability
...
CVE-2021-26859
CVE-2021-26859 is a Microsoft Power BI Information Disclosure vulnerability affecting Power BI Report Server versions cited as affected: 15.0.1103.234 and 15.0.1104.300 (per CNNVD). The issue is described as an information disclosure caused by excessive data output by the application, enabling an...
Security Update for Microsoft Power BI Report Server (March 2021)
An information disclosure vulnerability exists in Microsoft Power BI Report Server due to excessive data output by the application in Microsoft Power BI. An authenticated, remote attacker can exploit this, to disclose potentially sensitive information. Note that Nessus has not tested for this iss...
Microsoft Power BI Information Disclosure Vulnerability
...
Description of the security update for Power BI Report Server (May 2020): March 9, 2021 (KB5001284)
Description of the security update for Power BI Report Server May 2020: March 9, 2021 KB5001284 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services if it incorrectly handles page requests. An attacker who successfully exploits this vulnerability could...
Description of the security update for Power BI Report Server (October 2020): March 9, 2021 (KB5001285)
Description of the security update for Power BI Report Server October 2020: March 9, 2021 KB5001285 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services if it incorrectly handles page requests. An attacker who successfully exploits this vulnerability cou...
Vulnerability fixed in Microsoft SQL Server
A vulnerability has been fixed in the Microsoft SQL product group. Server. The vulnerability is in the Power BI application. The vulnerability enables an authenticated remote malicious person to able to obtain sensitive information. Power BI:...
PT-2021-2285 · Microsoft · Power Bi
Name of the Vulnerable Software and Affected Versions: Microsoft Power BI affected versions not specified Description: The issue is related to a lack of protection for service data in the Power BI report server, which could allow a remote attacker to gain unauthorized access to protected...
The vulnerability of the BI Platform Security component of the Oracle Business Intelligence Enterprise Edition software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the BI Platform Security component of the Oracle Business Intelligence Enterprise Edition is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using...
CVE-2021-21444
SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably treated by all user agents. This could, as a result, nullify the added X-Frame-Options header leading to Clickjacking attack...
Design/Logic Flaw
SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably treated by all user agents. This could, as a result, nullify the added X-Frame-Options header leading to Clickjacking attack...
CVE-2021-21444
CVE-2021-21444 affects SAP Business Objects BI Platform versions 410, 420, and 430. The vulnerability stems from the response headers containing multiple X-Frame-Options entries, which may not be uniformly respected by all user agents, potentially nullifying the X-Frame-Options header and enablin...
CVE-2021-21444
SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably treated by all user agents. This could, as a result, nullify the added X-Frame-Options header leading to Clickjacking attack...
The vulnerability of the E-Business Suite component – XDO, a software tool for creating reports with Oracle BI Publisher – allows an intruder to gain unauthorized access to protected information. This enables the intruder to read, modify, add, or delete data, or to cause service interruptions.
The vulnerability of the E-Business Suite component – XDO, a software tool for creating reports in Oracle BI Publisher – is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information, read, modify, add, or...
The vulnerability of the Administration component of the Oracle BI Publisher software allows a malicious individual to gain unauthorized access to protected information. This access includes reading, modifying, adding, or deleting data, as well as causing service failures.
The vulnerability of the Administration component of the Oracle BI Publisher software for creating reports is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, to read, modify, add, or delete data...
The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool allows a malicious individual to gain access to modify, add, or delete data, or to cause service interruptions.
The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or cause service failures using the HTTP protocol...
Recent enhancements for Microsoft Power Platform governance
An emerging trend in digital transformation efforts has been the rise of low-code development platforms. Of course, these low-code platforms must be grounded in best-of-breed governance capabilities which include security and compliance features. Without strong governance, the full benefits of...
Recent enhancements for Microsoft Power Platform governance
An emerging trend in digital transformation efforts has been the rise of low-code development platforms. Of course, these low-code platforms must be grounded in best-of-breed governance capabilities which include security and compliance features. Without strong governance, the full benefits of...