CVE-2026-58647

Опубликовано: 14 июл. 2026

Источник: msrc

CVSS3: 8

EPSS Низкий

Описание

Microsoft PowerBI Report Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network.

Обновления

Продукт	Статья	Обновление
Power BI Report Server	Release Notes	Security Update

Показывать по

Возможность эксплуатации

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Unlikely

EPSS

Процентиль: 27%

0.00348

Низкий

8 High

CVSS3

Связанные уязвимости

CVE-2026-58647

CVSS3: 8

nvd

19 дней назад

Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network.

GHSA-qxvr-2hqj-cxr6

CVSS3: 8

github

19 дней назад

Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network.

EPSS

Процентиль: 27%

0.00348

Низкий

8 High

CVSS3