Tracker / CVE-2019-1332
CVE-2019-1332
Medium 6.1
A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'.
Affected products and versions
| microsoft | power_bi_report_server |
|---|---|
| microsoft | sql_server_2017_reporting_services |
| microsoft | sql_server_2019_reporting_services |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.