description: A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'.
problem types: Spoofing
affected:
{
product: SQL Server 2017 Reporting Services
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Power BI Report Server
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: SQL Server 2019 Reporting Services
vendor: Microsoft
versions:
status: affected, version: unspecified
}
