A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'.
6.1CVSS
5.9AI Score
0.002EPSS
A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments, aka 'Microsoft Power BI Report Server Spoofing Vulnerability'.
6.8CVSS
6.5AI Score
0.001EPSS
7.7CVSS
7.1AI Score
0.006EPSS
7.6CVSS
7.8AI Score
0.013EPSS
A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim.Combining these 2 vulnerabilities together, an attacker is able...
7.6CVSS
7.6AI Score
0.001EPSS
8.2CVSS
8.6AI Score
0.001EPSS