Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-1332

A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS

Description

A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft SQL Server 2017 Reporting Services

  • unspecifiedaffected

Microsoft Power BI Report Server

  • unspecifiedaffected

Microsoft SQL Server 2019 Reporting Services

  • unspecifiedaffected

References