CVE-2021-31984

CVE-2021-31984 is a remote code execution vulnerability affecting Microsoft Power BI components (notably Power BI Report Server). The CVE entry is supported by multiple sources indicating an RCE risk in affected Power BI products, with the underlying issue tied to code execution paths in Power BI...

CVE-2019-1332

CVE-2019-1332 is an XSS in Microsoft SQL Server Reporting Services (SSRS) caused by inadequate sanitization of crafted web requests. Affected product: SSRS within SQL Server deployments. Impact per documentation: cross-site scripting could enable script execution in the context of the SSRS user. ...

CVE-2020-1173

CVE-2020-1173 : A spoofing vulnerability in Microsoft Power BI Report Server arises from improper validation of the content-type of uploaded attachments. An authenticated attacker could upload a specially crafted payload and execute scripts in the user’s security context, enabling user-interface ...