8.0
Élevée
CVE-2026-21229 Improper input validation in Power BI allows an authorized attacker to execute code over a network
Description
Improper input validation in Power BI allows an authorized attacker to execute code over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Power BI Report Server 1.6 | 1.6.0 → < 1.25.9508.3237 | 1.25.9508.3237 |
Références
- Power BI Remote Code Execution Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Power BI Report Server
Les 5 CVE de Power BI Report Server →
CVE-2026-65811
Improper input validation in Power BI allows an authorized attacker to execute code over a network
8.8
Élevée
CVE-2026-58647
Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized…
8.0
Élevée
CVE-2020-1173
A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded…
Non notée
CVE-2019-1332
A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not…
Non notée