Unrated severityNVD Advisory· Published Dec 10, 2019· Updated Aug 4, 2024

CVE-2019-1332

Description

A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/SQL Server Reporting Servicesllm-fuzzy3 versions
(expand)+ 2 more
- (no CPE)
- (no CPE)range: unspecified
- (no CPE)range: unspecified
Microsoft/Power BI Report Servercpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-1332-Cross-Site%20Scripting-Microsoft%20SQL%20Server%20Reporting%20Servicesmitrex_refsource_MISC
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1332mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000