EUVD-2026-110643
GHSA-mjhm-mj37-2hg8
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as low-privilege BI user
-
DeliverySubmit base64 SVG with script to /api/v2/ai/sessions
-
ExploitVictim renders content in assistant window
-
ExecutionEmbedded JavaScript executes in victim browser
-
ImpactSteal session data or alter displayed content
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Output encoding, context-aware escaping
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires an authenticated low-privilege account on the Sisense Cloud BI Platform (CVSS PR:L) that can reach the /api/v2/ai/sessions API and submit an image in the specific data:image/svg+xml;base64 data-URI format containing embedded script tags. The payload only executes when the SVG content is rendered in the AI assistant window, so a victim must view that window (CVSS UI:A - active interaction required); this user-interaction and authentication gating is the primary limiting factor, confining realistic abuse to account-holders or multi-tenant insiders rather than anonymous remote attackers. Affected deployments are those running Cloud BI Platform versions prior to 2026-10-27; updating to the vendor-supplied fixed version is the stated remediation. |
| Impact | Signals point to a genuine but second-tier priority rather than an emergency. The supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:A) describes a network-reachable, low-complexity flaw that nonetheless requires an authenticated low-privilege account (PR:L) and active victim interaction (UI:A) - the injected script only fires when a victim renders the assistant window. The 4.0 impacts VC:H and SC:H (subsequent-system confidentiality high) drive the 8.3 score and reflect classic cross-user XSS consequences such as session or data theft in another user's browser context. Counterbalancing this, EPSS is only 0.39% (33rd percentile), the CVE is NOT in CISA KEV, and no exploit/PoC reference is supplied - so there is no public exploit identified at time of analysis and no evidence of active exploitation. The vuln.today decision label is 'this_week', consistent with a patch-promptly-but-not-emergency posture. Net: a real, patch-this-week issue whose exploitation is gated by authentication and user interaction, not a drop-everything scenario. Note the UI:A plus PR:L combination means an insider or any account-holder (e.g., in a multi-tenant BI deployment) is the realistic threat actor, not an anonymous internet attacker. |
| Exploit ScenarioDerived | An authenticated low-privilege user of the Sisense Cloud BI Platform submits an SVG image as a base64 data URI (data:image/svg+xml;base64) to the /api/v2/ai/sessions API with embedded script tags. When another user (or the same session) renders that content in the AI assistant window, the JavaScript executes in their browser, enabling theft of session data or alteration of displayed assistant content. No public exploit code or PoC reference is provided, so this scenario is inferred from the description and CVSS vector. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 28, 2026
Cross-site scripting in Sisense Cloud BI Platform lets an authenticated low-privilege user submit a base64-encoded SVG data URI (data:image/svg+xml;base64) to the /api/v2/ai/sessions API, and script tags embedded in that SVG execute when the image is rendered in the AI assistant window, allowing JavaScript to run in the viewer's context and the displayed content to be altered. Successful exploitation requires the attacker to hold a valid account that can reach the sessions endpoint, and execution only occurs when a victim opens the assistant window (UI:A, PR:L per both the CVSS 4.0 vector and the independent assessment), which confines realistic abuse to account-holders or multi-tenant insiders rather than anonymous remote attackers. No public exploit code has been identified at time of analysis and the CVE is not in CISA KEV; EPSS is 0.39% (33rd percentile) and the vuln.today decision label is this_week, consistent with an assessment of a genuine but second-tier priority rather than an emergency.
RemediationAI
The vendor's stated remediation, and the only complete fix identified in the available sources, is to update Sisense Cloud BI Platform to the release published after the 2026-10-27 cutoff referenced by EUVD (affected range "0 <27/10/2026"); patch status is recorded as available from the vendor, and the exact fixed build number is not given in the supplied data, so confirm the target build against the INCIBE advisory at https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sisenses-cloud-bi-platform before upgrading. No workaround is documented in the available sources, and because the flaw is neutralization of submitted SVG content rather than a configuration toggle, no partial mitigation is described that would remove the exposure while leaving the AI assistant endpoint functional. Given that exploitation prerequisites are a valid low-privilege account plus a victim viewing the assistant window, prioritise the upgrade on tenants where many non-administrative users can reach /api/v2/ai/sessions, and track the CVE via the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-117494; with EPSS at 0.39% (33rd percentile), no KEV listing and no public exploit identified, the fix falls into this_week rather than emergency patching.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The issue is CWE-79 (improper neutralization of input during web page generation). SVG is an XML-based vector image format that supports embedded <script> elements and event handlers, so any pipeline that accepts SVG and later renders it inline in a browser context inherits the full script-execution surface of HTML. Here the AI assistant feature accepts images through /api/v2/ai/sessions in the specific data:image/svg+xml;base64 data-URI form; the available sources indicate the script tags inside the SVG survive processing and are executed when the content is displayed in the assistant window. Because the script runs in the origin of the Sisense Cloud BI Platform application, the CVSS 4.0 vector rates scope as changed (S:C) with high confidentiality and low integrity/availability impact, while the independent assessment's CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N) similarly captures a scope change with high confidentiality impact and limited integrity impact - the direct illustration of impact given in the description is that the displayed content can be altered. The public CVSS 4.0 base score is 8.3; the independent assessment is more conservative in its preconditions, emphasizing that a low-privileged account and a victim who views the assistant window are both required. The trigger is a crafted image submission followed by rendering of that image in the assistant UI; the sources do not describe any deeper parsing or memory-safety component, and the flaw is purely an output/rendering neutralization failure. Affected per CPE is cpe:2.3:a:sisense:cloud_bi_platform, with EUVD listing Cloud BI Platform versions up to the 2026-10-27 release cutoff.
Know when Cloud Bi Platform gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
Authenticated low-priv user submits the payload (PR:L) and a victim must render the assistant window (UI:R); script runs cross-context (S:C) enabling data theft (C:H) and content alteration (I:L).
Primary rating from Vendor (INCIBE).
CVSS VectorVendor: INCIBE
Lifecycle Timeline
2DescriptionCVE.org
Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64. Script tags embedded in the SVG are processed when the content is rendered in the assistant window, allowing JavaScript to be executed and the displayed content to be altered.
Executive ViewAI
A cross-site scripting vulnerability in the Sisense Cloud BI Platform allows authenticated low-privilege users to execute malicious scripts within the AI assistant window, potentially altering displayed content and compromising viewer sessions. The threat is limited to authenticated insiders or account-holders, but could enable data manipulation or session hijacking, impacting the integrity of business intelligence outputs. Leadership should prioritize remediation due to the potential for insider abuse and the platform's role in decision-making.
Apply vendor patch. Until patched, restrict access to the /api/v2/ai/sessions API to trusted users, monitor for suspicious base64-encoded SVG submissions, and educate users about phishing risks.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Cross-Site Scripting occurs when an application accepts untrusted data and sends it to a web browser without proper validation or encoding.
Exploit-DB