First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-43481

HighCVSS 8.8/10Last modified Aug 19, 2026

Description

Power BI Report Server Spoofing Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Oct 8, 2024
Last modified: Aug 19, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-434826.5Microsoft Outlook for iOS Information Disclosure Vulnerability CVE-2024-434837.5.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-434847.5.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-434857.5.NET and Visual Studio Denial of Service Vulnerability CVE-2024-434876.5Windows Mark of the Web Security Feature Bypass Vulnerability CVE-2024-434889.8Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remot CVE-2024-434898.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2024-43497.3A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerabili CVE-2024-434919.8Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Componen CVE-2024-434927.8Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability CVE-2024-434957.3Windows libarchive Remote Code Execution Vulnerability CVE-2024-434968.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2024-43481: High severity, CVSS 8.8 | Vulnix