CVE-2019-15637

Published: Aug 26, 2019Modified: Nov 21, 2024

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop.

Affected (20)

Products: Tableau: Tableau Server, Tableau Desktop, Tableau Reader, Tableau Public Desktop

4 products

Tableau Public Desktop

Configuration A

1 platform

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Tableau Tableau Server	From 10.2 to 10.2.23
Tableau Tableau Server	From 10.3 to 10.3.23
Tableau Tableau Server	From 10.4 to 10.4.19
Tableau Tableau Server	From 10.5 to 10.5.18
Tableau Tableau Server	From 2018.1 to 2018.1.15
Tableau Tableau Server	From 2018.2 to 2018.12
Tableau Tableau Server	From 2018.3 to 2018.3.9
Tableau Tableau Server	From 2019.1 to 2019.1.6
Tableau Tableau Server	From 2019.2 to 2019.2.2

Configuration D

9 vulnerable

Vulnerable Software	Affected Versions
Tableau Tableau Desktop	From 10.2 to 10.2.23
Tableau Tableau Desktop	From 10.3 to 10.3.23
Tableau Tableau Desktop	From 10.4 to 10.4.19
Tableau Tableau Desktop	From 10.5 to 10.5.18
Tableau Tableau Desktop	From 2018.1 to 2018.1.15
Tableau Tableau Desktop	From 2018.2 to 2018.2.12
Tableau Tableau Desktop	From 2018.3 to 2018.3.9
Tableau Tableau Desktop	From 2019.1 to 2019.1.6
Tableau Tableau Desktop	From 2019.2 to 2019.2.2