CVE-2019-15637

Published: Aug 26, 2019Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop.

Affected (20)

Products: Tableau: Tableau Server, Tableau Desktop, Tableau Reader, Tableau Public Desktop

4 products

Tableau Public Desktop

Configuration A

1 platform

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Tableau Tableau Server	10.2 ≤ version ≤ 10.2.23
Tableau Tableau Server	10.3 ≤ version ≤ 10.3.23
Tableau Tableau Server	10.4 ≤ version ≤ 10.4.19
Tableau Tableau Server	10.5 ≤ version ≤ 10.5.18
Tableau Tableau Server	2018.1 ≤ version ≤ 2018.1.15
Tableau Tableau Server	2018.2 ≤ version ≤ 2018.12
Tableau Tableau Server	2018.3 ≤ version ≤ 2018.3.9
Tableau Tableau Server	2019.1 ≤ version ≤ 2019.1.6
Tableau Tableau Server	2019.2 ≤ version ≤ 2019.2.2

Configuration D

9 vulnerable

Vulnerable Software	Affected Versions
Tableau Tableau Desktop	10.2 ≤ version ≤ 10.2.23
Tableau Tableau Desktop	10.3 ≤ version ≤ 10.3.23
Tableau Tableau Desktop	10.4 ≤ version ≤ 10.4.19
Tableau Tableau Desktop	10.5 ≤ version ≤ 10.5.18
Tableau Tableau Desktop	2018.1 ≤ version ≤ 2018.1.15
Tableau Tableau Desktop	2018.2 ≤ version ≤ 2018.2.12
Tableau Tableau Desktop	2018.3 ≤ version ≤ 2018.3.9
Tableau Tableau Desktop	2019.1 ≤ version ≤ 2019.1.6
Tableau Tableau Desktop	2019.2 ≤ version ≤ 2019.2.2