Power bi report server

This hub aggregates every CVE we track for Power bi report server, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Power bi report server.

• CVE-2026-58647Microsoft PowerBI Report Server Spoofing Vulnerability8.0Jul 14, 2026
• CVE-2026-21229Power BI Remote Code Execution Vulnerability8.0Feb 10, 2026
• CVE-2024-43612Power BI Report Server Spoofing Vulnerability6.9Oct 8, 2024
• CVE-2024-43481Power BI Report Server Spoofing Vulnerability6.5Oct 8, 2024
• CVE-2023-21806Power BI Report Server Spoofing Vulnerability8.2Feb 14, 2023
• CVE-2021-41372Power BI Report Server Spoofing Vulnerability7.6Nov 10, 2021
• CVE-2021-31984Power BI Remote Code Execution Vulnerability7.6Jul 14, 2021
• CVE-2021-26859Microsoft Power BI Information Disclosure Vulnerability7.7Mar 11, 2021
• CVE-2020-1173A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments, aka 'Microsoft Power BI Report Server Spoofing Vulnerability'.6.8May 21, 2020
• CVE-2019-1332A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Mic...6.1Dec 10, 2019