Back to vendor advisories
Microsoft Security Response CenterCVE-2024-43612

Power BI Report Server Spoofing Vulnerability

HighVendor CVSS 6.9 / 10 1 CVE Published Oct 8, 2024 at 7:00 AM UTC

Summary

According to the CVSS metric, user interaction is required (UI:R).

What interaction would the user have to do?

The user would have to click on a specially crafted file to be compromised by the attacker.

Products covered

  • Power BI Report Server - May 2024

Remediation

Release Notes

Vendor-listed fixes

  • 1.21.9032.4573

CVEs in this advisory 1

Updates

  1. Published by Microsoft Security Response Center

    The publication date reported by the vendor.

  2. Updated by Microsoft Security Response Center

    The vendor changed the advisory after it was first published.

  3. Added to SecurityAlert

    We collected the advisory from the official source.