Microsoft Power BI Report Server
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-65811 | 1.6.0 – < 1.26.9682.1442 | Power BI Remote Code Execution Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-58647 | 1.6.0 – < 1.26.9682.1442 | Microsoft PowerBI Report Server Spoofing Vulnerability | HIGH 8.0 | 0.5 % | ||
| CVE-2026-21229 | 1.6.0 – < 1.25.9508.3237 | Power BI Remote Code Execution Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2020-1173 | 1.6.0 – < 1.6.7364.4075 | Microsoft Power BI Report Server Spoofing Vulnerability | MEDIUM 6.8 | 2.5 % | ||
| CVE-2019-1332 | unspecified | A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially | MEDIUM 6.1 | 11 % |