CVE-2023-21806

HighCVSS 8.2

Published: 14/02/2023(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.78%

53th percentile - higher than 53% of all known CVEs

Summary

A spoofing vulnerability exists in Power BI Report Server. An attacker could exploit it to impersonate a trusted source, potentially leading to fraud or data theft.

Risk Assessment

The risk for the organization includes potential phishing attacks or report forgery, which could undermine trust in data and the system.

Recommendation

It is recommended to install security updates for Power BI Report Server to eliminate the spoofing vulnerability.

Other vulnerabilities in Power BI Report Server

See all

CVE-2024-43612Medium
Spoofing Vulnerability in Power BI Report Server. An attacker could impersonate a trusted source.
CVE-2024-43481Medium
A spoofing vulnerability in Power BI Report Server.

Original NVD description (English source)

Power BI Report Server Spoofing Vulnerability