CVE-2019-15637
26.08.2019, 17:15
Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop.Enginsight
| Vendor | Product | Version |
|---|---|---|
| tableau | tableau_server | 10.5 ≤ 𝑥 ≤ 10.5.18 |
| tableau | tableau_server | 2018.1 ≤ 𝑥 ≤ 2018.1.15 |
| tableau | tableau_server | 2018.2 ≤ 𝑥 ≤ 2018.12 |
| tableau | tableau_server | 2018.3 ≤ 𝑥 ≤ 2018.3.9 |
| tableau | tableau_server | 2019.1 ≤ 𝑥 ≤ 2019.1.6 |
| tableau | tableau_server | 2019.2 ≤ 𝑥 ≤ 2019.2.2 |
| tableau | tableau_server | 10.2 ≤ 𝑥 ≤ 10.2.23 |
| tableau | tableau_server | 10.3 ≤ 𝑥 ≤ 10.3.23 |
| tableau | tableau_server | 10.4 ≤ 𝑥 ≤ 10.4.19 |
| tableau | tableau_server | 10.5 ≤ 𝑥 ≤ 10.5.18 |
| tableau | tableau_server | 2018.1 ≤ 𝑥 ≤ 2018.1.15 |
| tableau | tableau_server | 2018.2 ≤ 𝑥 ≤ 2018.12 |
| tableau | tableau_server | 2018.3 ≤ 𝑥 ≤ 2018.3.9 |
| tableau | tableau_server | 2019.1 ≤ 𝑥 ≤ 2019.1.6 |
| tableau | tableau_server | 2019.2 ≤ 𝑥 ≤ 2019.2.2 |
| tableau | tableau_desktop | 10.2 ≤ 𝑥 ≤ 10.2.23 |
| tableau | tableau_desktop | 10.3 ≤ 𝑥 ≤ 10.3.23 |
| tableau | tableau_desktop | 10.4 ≤ 𝑥 ≤ 10.4.19 |
| tableau | tableau_desktop | 10.5 ≤ 𝑥 ≤ 10.5.18 |
| tableau | tableau_desktop | 2018.1 ≤ 𝑥 ≤ 2018.1.15 |
| tableau | tableau_desktop | 2018.2 ≤ 𝑥 ≤ 2018.2.12 |
| tableau | tableau_desktop | 2018.3 ≤ 𝑥 ≤ 2018.3.9 |
| tableau | tableau_desktop | 2019.1 ≤ 𝑥 ≤ 2019.1.6 |
| tableau | tableau_desktop | 2019.2 ≤ 𝑥 ≤ 2019.2.2 |
| tableau | tableau_desktop | 10.2 ≤ 𝑥 ≤ 10.2.23 |
| tableau | tableau_desktop | 10.3 ≤ 𝑥 ≤ 10.3.23 |
| tableau | tableau_desktop | 10.4 ≤ 𝑥 ≤ 10.4.19 |
| tableau | tableau_desktop | 10.5 ≤ 𝑥 ≤ 10.5.18 |
| tableau | tableau_desktop | 2018.1 ≤ 𝑥 ≤ 2018.1.15 |
| tableau | tableau_desktop | 2018.2 ≤ 𝑥 ≤ 2018.2.12 |
| tableau | tableau_desktop | 2018.3 ≤ 𝑥 ≤ 2018.3.9 |
| tableau | tableau_desktop | 2019.1 ≤ 𝑥 ≤ 2019.1.6 |
| tableau | tableau_desktop | 2019.2 ≤ 𝑥 ≤ 2019.2.2 |
| tableau | tableau_reader | 10.2 ≤ 𝑥 ≤ 10.2.2 |
| tableau | tableau_public_desktop | 10.2 ≤ 𝑥 ≤ 10.2.2 |
𝑥
= Vulnerable software versions
References