Skip to content

Vulnerabilities of Microsoft Power BI Report Server

Is your version affected?

CVE Summary Score Published
CVE-2026-65811 Improper input validation in Power BI allows an authorized attacker to execute code over a network 8.8 High Aug 11, 2026
CVE-2026-58647 Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized… 8.0 High Jul 14, 2026
CVE-2026-21229 Improper input validation in Power BI allows an authorized attacker to execute code over a network 8.0 High Feb 10, 2026
CVE-2020-1173 A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded… Not rated May 21, 2020
CVE-2019-1332 A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not… Not rated Dec 10, 2019

Other Microsoft products