[ Vendor · 2 CVEs ]
Sisense
CVEs affecting Sisense published in the last 30 days, plus any Sisense CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-117493 | 27 Oct 2026 | CVSS 8.3 | Sisense Cloud BI PlatformStored cross-site scripting (XSS) in BloX widgets. The /api/dashboards/<id>/widgets/<id> API accepts HTML and JavaScript content in the ‘desc’ and… | |
| CVE-2026-117494 | 27 Oct 2026 | CVSS 8.3 | Sisense Cloud BI PlatformCross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64. Script… |