Power Bi Report Server (Microsoft) - vulnerabilities (CVEs)

11 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2026-08-11. Vendor: Microsoft.

CVEs of Power Bi Report Server

• CVE-2026-65811 - CVSS 8.8 (high), 2026-08-11: Improper input validation in Power BI allows an authorized attacker to execute code over a network.
• CVE-2026-58647 - CVSS 8 (high), 2026-07-14: Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a…
• CVE-2026-21229 - CVSS 8.8 (high), 2026-02-10: Improper input validation in Power BI allows an authorized attacker to execute code over a network.
• CVE-2024-43612 - CVSS 6.9 (medium), 2024-10-08: Power BI Report Server Spoofing Vulnerability
• CVE-2024-43481 - CVSS 8.8 (high), 2024-10-08: Power BI Report Server Spoofing Vulnerability
• CVE-2023-21806 - CVSS 8.2 (high), 2023-02-14: Power BI Report Server Spoofing Vulnerability
• CVE-2021-41372 - CVSS 9.6 (critical), 2021-11-10: A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files…
• CVE-2021-31984 - CVSS 8.8 (high), 2021-07-14: Power BI Remote Code Execution Vulnerability
• CVE-2021-26859 - CVSS 7.7 (high), 2021-03-11: Microsoft Power BI Information Disclosure Vulnerability
• CVE-2020-1173 - CVSS 6.8 (medium), 2020-05-21: A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments. An authenticated…
• CVE-2019-1332 - CVSS 6.1 (medium), 2019-12-10: A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web…