CVE-2019-15637

🗓️ 26 Aug 2019 16:21:07Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 242 Views

Numerous Tableau products vulnerable to XXE via malicious files, leading to info disclosure or DoS

Reporter	Title	Published	Views	Family All 13
0day.today	Tableau - XML External Entity Exploit	27 Aug 201900:00	–	zdt
ICS	North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs	25 Jul 202412:00	–	ics
ATTACKERKB	CVE-2019-15637	26 Aug 201900:00	–	attackerkb
Circl	CVE-2019-15637	27 Aug 201900:00	–	circl
Cvelist	CVE-2019-15637	26 Aug 201916:21	–	cvelist
Exploit DB	Tableau - XML External Entity	27 Aug 201900:00	–	exploitdb
EUVD	EUVD-2019-6589	26 Aug 201916:21	–	euvd
exploitpack	Tableau - XML External Entity	27 Aug 201900:00	–	exploitpack
NVD	CVE-2019-15637	26 Aug 201917:15	–	nvd
Packet Storm	Tableau XML Injection	27 Aug 201900:00	–	packetstorm

NVD

Node

tableau tableau_serverRange10.5–10.5.18

OR

tableau tableau_serverRange2018.1–2018.1.15

OR

tableau tableau_serverRange2018.2–2018.12

OR

tableau tableau_serverRange2018.3–2018.3.9

OR

tableau tableau_serverRange2019.1–2019.1.6

OR

tableau tableau_serverRange2019.2–2019.2.2

AND

linux linux_kernelMatch-

Node

tableau tableau_serverRange10.2–10.2.23

OR

tableau tableau_serverRange10.3–10.3.23

OR

tableau tableau_serverRange10.4–10.4.19

OR

tableau tableau_serverRange10.5–10.5.18

OR

tableau tableau_serverRange2018.1–2018.1.15

OR

tableau tableau_serverRange2018.2–2018.12

OR

tableau tableau_serverRange2018.3–2018.3.9

OR

tableau tableau_serverRange2019.1–2019.1.6

OR

tableau tableau_serverRange2019.2–2019.2.2

AND

microsoft windowsMatch-

Node

tableau tableau_desktopRange10.2–10.2.23

OR

tableau tableau_desktopRange10.3–10.3.23

OR

tableau tableau_desktopRange10.4–10.4.19

OR

tableau tableau_desktopRange10.5–10.5.18

OR

tableau tableau_desktopRange2018.1–2018.1.15

OR

tableau tableau_desktopRange2018.2–2018.2.12

OR

tableau tableau_desktopRange2018.3–2018.3.9

OR

tableau tableau_desktopRange2019.1–2019.1.6

OR

tableau tableau_desktopRange2019.2–2019.2.2

AND

apple macosMatch-

Node

tableau tableau_desktopRange10.2–10.2.23

OR

tableau tableau_desktopRange10.3–10.3.23

OR

tableau tableau_desktopRange10.4–10.4.19

OR

tableau tableau_desktopRange10.5–10.5.18

OR

tableau tableau_desktopRange2018.1–2018.1.15

OR

tableau tableau_desktopRange2018.2–2018.2.12

OR

tableau tableau_desktopRange2018.3–2018.3.9

OR

tableau tableau_desktopRange2019.1–2019.1.6

OR

tableau tableau_desktopRange2019.2–2019.2.2

AND

microsoft windowsMatch-

Node

tableau tableau_readerRange10.2–10.2.2

AND

apple macosMatch-

OR

microsoft windowsMatch-

Node

tableau tableau_public_desktopRange10.2–10.2.2

AND

apple macosMatch-

OR

microsoft windowsMatch-

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/154232/Tableau-XML-Injection.html
github	www.github.com/minecrater/exploits/blob/master/TableauXXE.py
community	www.community.tableau.com/community/security-bulletins/blog/2019/08/22/important-adv-2019-030-xxe-vulnerability-in-tableau-products

21 Nov 2024 04:29Current

7.5High risk

Vulners AI Score7.5

CVSS 25.5

CVSS 3.18.1

CVSS 37.1

EPSS0.22725

tableau xxe information disclosure dos security vulnerability