PT-2024-38241 · Progress · Progress Telerik Report Server

Name of the Vulnerable Software and Affected Versions: In Progress Telerik Report Server versions prior to 2024 Q3 10.2.24.806 Description: A credential stuffing attack is possible through improper restriction of excessive login attempts. This issue allows attackers to attempt multiple logins...

Progress Software Telerik Report Server 安全漏洞

Progress Software Telerik Report Server is an enterprise-level report management and distribution solution from Progress Software, USA. A security vulnerability exists in versions prior to Progress Software Telerik Report Server 2024 Q3 10.2.24.924. An attacker can exploit the vulnerability to...

Progress Software Telerik Report Server 安全漏洞

Progress Software Telerik Report Server is an enterprise-level report management and distribution solution from Progress Software, USA. A security vulnerability exists in versions prior to Progress Software Telerik Report Server 2024 Q3 18.2.24.924. An attacker can exploit the vulnerability to...

Progress Software Telerik Report Server 资源管理错误漏洞

Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software, Inc. A resource management error vulnerability exists in versions prior to Progress Software Telerik Report Server 2024 Q3 10.2.24.806, which originates from an HTTP...

PT-2024-38243 · Progress · Telerik Report Server

Name of the Vulnerable Software and Affected Versions: In Progress Telerik Report Server versions prior to 2024 Q3 10.2.24.806 Description: The issue allows for an HTTP DoS attack on anonymous endpoints without rate limiting. This can potentially lead to service disruption. Recommendations: For...

PT-2024-38242 · Progress · Telerik Report Server

Name of the Vulnerable Software and Affected Versions: In Progress Telerik Report Server versions prior to 2024 Q3 10.2.24.806 Description: A password brute forcing attack is possible through weak password requirements. Recommendations: For versions prior to 2024 Q3 10.2.24.806, update to version...

Vulnerabilities fixed in Microsoft SQL Server Power BI Report Server

Microsoft fixed vulnerabilities in SQL Server Power BI Report Server A malicious party could exploit the vulnerabilities to impersonate another user and execute arbitrary code under their context, possibly with administrator privileges. Successful exploitation requires the malicious party to have...

CVE-2024-43612

Power BI Report Server Spoofing Vulnerability...

CVE-2024-43612

Power BI Report Server Spoofing Vulnerability...

CVE-2024-43481

Power BI Report Server Spoofing Vulnerability...

CVE-2024-43612 Power BI Report Server Spoofing Vulnerability

...

CVE-2024-43612 Power BI Report Server Spoofing Vulnerability

...

CVE-2024-43612

CVE-2024-43612 affects Microsoft Power BI Report Server. The issue is described as a server-side spoofing vulnerability that could allow an attacker to impersonate a user and influence the user interface, potentially enabling remote code execution under the attacker’s context in some disclosures....

CVE-2024-43481 Power BI Report Server Spoofing Vulnerability

...

CVE-2024-43481

CVE-2024-43481 affects Power BI Report Server with a spoofing vulnerability in the server UI. Affected component: Power BI Report Server; root cause details are not fully enumerated in the provided documents, but the issue is identified as a server spoofing vulnerability with high impact per CVSS...

Power BI Report Server Spoofing Vulnerability

...

Power BI Report Server Spoofing Vulnerability

...

PT-2024-6990 · Microsoft · Power Bi Report Server

Name of the Vulnerable Software and Affected Versions: Power BI Report Server affected versions not specified Description: The issue is related to the Power BI Report Server and involves a lack of protection for the web page structure, potentially allowing a remote attacker to perform cross-site...

KLA73909 SUI vulnerabilities in Microsoft SQL Server

A spoofing user interface vulnerabilities was found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to spoof user interface. Original advisories CVE-2024-43481 CVE-2024-43612 Related products Microsoft-Power-BI CVE list CVE-2024-43481 high CVE-2024-43612 high Solution...

PT-2024-6806 · Microsoft · Power Bi Report Server

Name of the Vulnerable Software and Affected Versions: Power BI Report Server versions affected versions not specified Description: The issue is related to the Power BI Report Server, where a lack of proper web page structure protection can be exploited. This can allow a remote attacker to perfor...