Skip to main content

Power Bi Report Server CVE-2021-31984

HIGH
2021-07-14 secure@microsoft.com
RCE Power Bi Report Server
7.6
CVSS 3.1 · Vendor: microsoft
Share

Severity by source

Vendor (microsoft) PRIMARY
7.6 HIGH
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Jul 14, 2021 - 18:15 cve.org
HIGH 7.6

DescriptionCVE.org

Power BI Remote Code Execution Vulnerability

AnalysisAI

Power BI Remote Code Execution Vulnerability. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

Affected products include: Microsoft Power Bi Report Server.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Power Bi Report Server

View all
CVE-2019-1332 MEDIUM POC
6.1 Dec 10

A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly

CVE-2024-43481 HIGH
8.8 Oct 08

Power BI Report Server Spoofing Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitabl
CVE-2023-21806 HIGH
8.2 Feb 14

Power BI Report Server Spoofing Vulnerability. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitabl
CVE-2026-21229 HIGH
8.0 Feb 10

Improper input validation in Power BI allows an authorized attacker to execute code over a network. [CVSS 8.0 HIGH]
CVE-2021-26859 HIGH
7.7 Mar 11

Microsoft Power BI Information Disclosure Vulnerability. Rated high severity (CVSS 7.7), this vulnerability is remotely

CVE-2021-41372 HIGH
7.6 Nov 10

A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Temp
CVE-2020-1173 MEDIUM
6.8 May 21

A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded
CVE-2026-58647 MEDIUM
5.4 Jul 14

Cross-site scripting (CWE-79) in Microsoft Power BI Report Server lets an authenticated, low-privileged attacker inject

CVE-2024-43612 MEDIUM
4.7 Oct 08

Power BI Report Server Spoofing Vulnerability. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploita

Same technique RCE

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8

Share

CVE-2021-31984 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy