Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2698▼ 345 respecto a la semana anterior
Críticas / altas1316▼ 9 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 273 respecto a la semana anterior
11 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 0.96% | — | Microsoft Power BI Report Server | 11/8/2026 | 19/8/2026 | Improper input validation in Power BI allows an authorized attacker to execute code over a network. | |
| Analizada | Media (5.4) | 0.52% | — | Microsoft Power BI Report Server | 14/7/2026 | 19/8/2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network. | |
| Analizada | Alta (8.8) | 0.96% | — | Microsoft Power BI Report Server | 10/2/2026 | 19/8/2026 | Improper input validation in Power BI allows an authorized attacker to execute code over a network. | |
| Analizada | Media (4.7) | 0.73% | — | Microsoft Power BI Report Server | 8/10/2024 | 19/8/2026 | Power BI Report Server Spoofing Vulnerability | |
| Analizada | Alta (8.8) | 1.8% | — | Microsoft Power BI Report Server | 8/10/2024 | 19/8/2026 | Power BI Report Server Spoofing Vulnerability | |
| Modificada | Alta (8.2) | 0.78% | — | Microsoft Power BI Report Server | 14/2/2023 | 19/8/2026 | Power BI Report Server Spoofing Vulnerability | |
| Modificada | Crítica (9.6) | 0.68% | — | Microsoft Power BI Report Server | 10/11/2021 | 19/8/2026 | A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities together, an attacker is able to upload… | |
| Modificada | Alta (8.8) | 1.9% | — | Microsoft Power BI Report Server | 14/7/2021 | 10/8/2026 | Power BI Remote Code Execution Vulnerability | |
| Modificada | Media (6.5) | 3.4% | — | Microsoft Power BI Report Server | 11/3/2021 | 19/8/2026 | Microsoft Power BI Information Disclosure Vulnerability | |
| Modificada | Media (6.8) | 2.5% | — | Microsoft Power BI Report Server | 21/5/2020 | 19/8/2026 | A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments. An authenticated attacker could exploit the vulnerability by uploading a specially crafted payload and sending it to the user. The attacker who successfully exploited this vulnerability… | |
| Modificada | Media (6.1) | 11% | — | Microsoft Power BI Report ServerMicrosoft SQL Server 2017 Reporting ServicesMicrosoft SQL Server 2019 Reporting Services | 10/12/2019 | 17/6/2026 | A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'. |