Not rated

CVE-2019-1332 A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not…

Description

A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'.

Affected products and versions

Product	Affected versions	Fixed in
SQL Server 2017 Reporting Services	Versions not published
Power BI Report Server	Versions not published
SQL Server 2019 Reporting Services	Versions not published

The 2 CVEs of SQL Server 2017 Reporting Services →

CVE-2020-1044 A security feature bypass vulnerability exists in SQL Server Reporting Services (SSRS) when the server improperly… 4.3 Medium

Do you use SQL Server 2017 Reporting Services?

Track this CVE Watch SQL Server 2017 Reporting Services Check my SBOMs

www.cveye.io/en/cve/CVE-2019-1332

Timeline

Published December 10, 2019
Last modified August 4, 2024

References

portal.msrc.microsoft.com portal.msrc.microsoft.com
github.com github.com

Track this CVE

CVE-2019-1332 A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not…

Description

Affected products and versions

Other CVEs of SQL Server 2017 Reporting Services