Read the docs

Sisense

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Sisense records in CISA KEV

No Sisense vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-81047 CVE-2026-117494 · GHSA-mjhm-mj37-2hg8

Cross-site scripting in Sisense Cloud BI Platform via SVG images

Priority LOW 36

Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64.

CVSS 4.0HIGH 8.3 Network Low privileges User interaction EPSS 0.00284 Published 2026-10-27 Fixed in 27/10/2026 CWE-79
TI-2026-81046 CVE-2026-117493 · GHSA-vjwh-8w5h-gwj6

Stored cross-site scripting in Sisense BloX widgets

Priority LOW 36

Stored Cross-Site Scripting (XSS) in Sisense BloX widgets, in all versions, both on Sisense Cloud and in self-hosted deployments, allows an authenticated user with the Designer or Administrator role to execute JavaScript…

CVSS 4.0HIGH 8.3 Network Low privileges User interaction EPSS 0.00284 Published 2026-10-27 No fix listed CWE-79
Open these records in search →