8.0
Élevée
CVE-2026-58647 Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized…
Description
Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Power BI Report Server 1.6 | 1.6.0 → < 1.26.9682.1442 | 1.26.9682.1442 |
Autres CVE de Power BI Report Server
Les 5 CVE de Power BI Report Server →
CVE-2026-65811
Improper input validation in Power BI allows an authorized attacker to execute code over a network
8.8
Élevée
CVE-2026-21229
Improper input validation in Power BI allows an authorized attacker to execute code over a network
8.0
Élevée
CVE-2020-1173
A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded…
Non notée
CVE-2019-1332
A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not…
Non notée