{"schema":"threatline.record/2","record":{"id":"CVE-2026-117494","aliases":[],"summary":"Multiple vulnerabilities in Sisense’s Cloud BI Platform","details":"Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64. Script tags embedded in the SVG are processed when the content is rendered in the assistant window, allowing JavaScript to be executed and the displayed content to be altered.","categories":["Unclassified"],"product":"Cloud BI Platform","vendor":"Sisense","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-117494","source_modified_at":"2026-10-27T09:21:06.837Z","fetched_at":"2026-10-27T10:24:27.527526Z","product":"Cloud BI Platform","vendor":"Sisense","versions":[{"status":"affected","version":"0","lessThan":"27/10/2026","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-117494","source_modified_at":"2026-10-27T09:21:06.837Z","fetched_at":"2026-10-27T10:24:27.527526Z","package":{"name":"Cloud BI Platform","ecosystem":null},"version":"27/10/2026","basis":"first unaffected version stated in the CVE record"}],"cvss":8.3,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-27T09:21:06.837Z","modified_at":"2026-10-27T09:21:06.837Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-117494","fetched_at":"2026-10-27T10:24:27.527526Z","source_modified_at":"2026-10-27T09:21:06.837Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sisenses-cloud-bi-platform"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-27T09:21:06.837Z","content_hash":"d3aff7dd975113de4d4a851a9c7486cd7cc6d2a293fd723d9ffc8884a962b3de"}}