CVE-2019-1332

Published: Dec 10, 2019Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'.

Affected (3)

Products: Microsoft: Power Bi Report Server, Sql Server 2017 Reporting Services, Sql Server 2019 Reporting Services

Microsoft

3 products

Power Bi Report Server

Sql Server 2017 Reporting Services

Sql Server 2019 Reporting Services

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Power Bi Report Server	All versions
Microsoft Sql Server 2017 Reporting Services	All versions
Microsoft Sql Server 2019 Reporting Services	All versions