Lucene search
+L

334 matches found

Cvelist
Cvelist
•added 2022/05/25 1:56 p.m.•30 views

CVE-2022-22127

Tableau is aware of a broken access control vulnerability present in Tableau Server affecting Tableau Server customers using Local Identity Store for managing users. The vulnerability allows a malicious site administrator to change passwords for users in different sites hosted on the same Tableau...

7.1AI score0.01092EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/05/25 12:00 a.m.•12 views

PT-2022-15263 · Tableau · Tableau Server

Name of the Vulnerable Software and Affected Versions: Tableau Server versions 2020.4.16 through 2021.4.4 and earlier Description: A broken access control issue is present in Tableau Server, affecting customers who use Local Identity Store for user management. This issue allows a malicious site...

7.2CVSS6.8AI score0.01092EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/05/25 12:00 a.m.•14 views

Tableau Server 安全漏洞

Tableau Server is a world-leading analytics platform from Tableau Inc. A security vulnerability exists in Tableau Server versions 2020.4.16, 2021.1.13, 2021.2.10, 2021.3.9, 2021.4.4, and earlier versions, which stems from an access control issue with the application. An attacker could exploit the...

7.2CVSS7AI score0.01092EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/25 12:00 a.m.•5 views

CVE-2022-22127: Undefined Security Weakness

Tableau is aware of a broken access control vulnerability present in Tableau Server affecting Tableau Server customers using Local Identity Store for managing users. The vulnerability allows a malicious site administrator to change passwords for users in different sites hosted on the same Tableau...

7.2CVSS7AI score0.01092EPSS
SaveExploits0References1
NCSC
NCSC
•added 2021/04/09 12:00 a.m.•17 views

Vulnerability fixed in Tableau Server

A vulnerability has been fixed in Tableau Server. The vulnerability allows a malicious person to use an Open Redirect attack to send the visitor with a custom link to a malicious website redirect when sharing a "view." Salesforce has released updates to fix the vulnerability fix in Tableau Server...

6.1CVSS6.8AI score0.01338EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2021/04/08 12:00 a.m.•957 views

Tableau Server Open Redirection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2020-032 Product: Tableau Server Manufacturer: Tableau Software, LLC, a Salesforce Company Affected Versions: 2019.4-2019.4.17, 2020.1-2020.1.13, 2020.2-2020.2.10, 2020.3-2020.3.6, 2020.4-2020.4.2 Tested Versions: 2020.2.1...

5.8CVSS0.01338EPSS
SaveExploits2
CNVD
CNVD
•added 2021/03/30 12:00 a.m.•17 views

Tableau Server users open redirection vulnerability

Tableau Server is a set of file hosting servers. The product is used to manage and share data visualizations, interactive dashboards, workbooks and reports created by Tableau Desktop data visualization software. A security vulnerability exists in Tableau users that stems from the server's inabili...

6.1CVSS6.7AI score0.01338EPSS
SaveExploits2References1
NVD
NVD
•added 2021/03/26 5:15 p.m.•28 views

CVE-2021-1629

Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users...

6.1CVSS0.01338EPSS
SaveExploits2References3
OSV
OSV
•added 2021/03/26 5:15 p.m.•12 views

CVE-2021-1629

Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users...

6.1CVSS6.4AI score0.01338EPSS
SaveExploits2References3
Prion
Prion
•added 2021/03/26 5:15 p.m.•23 views

Code injection

Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users...

5.8CVSS6.2AI score0.01338EPSS
SaveExploits2References3Affected Software1
attackerkb
attackerkb
•added 2021/03/26 5:15 p.m.•11 views

CVE-2021-1629

Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users...

6.1CVSS6.3AI score0.01338EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2021/03/26 4:20 p.m.•31 views

CVE-2021-1629

Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users...

6.5AI score0.01338EPSS
SaveExploits2References3
CVE
CVE
•added 2021/03/26 4:20 p.m.•228 views

CVE-2021-1629

Tableau Server (Tableau Server) is affected by CVE-2021-1629, an open redirect vulnerability arising from the server’s inability to validate certain URLs embedded in emails sent to users. This could allow an attacker to redirect a user to a malicious site via a link in a shared/view email. The is...

6.1CVSS6.2AI score0.01338EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/26 12:00 a.m.•4 views

CVE-2021-1629: URL Redirection to Untrusted Site

Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users...

6.1CVSS5.8AI score0.01338EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2021/03/26 12:00 a.m.•21 views

塔谱软件 Tableau Software Server 输入验证错误漏洞

Tableau Server is a set of file hosting servers. The product is used to manage and share data visualizations, interactive dashboards, workbooks and reports created by Tableau Desktop data visualization software. A security vulnerability exists in Tableau users that stems from the server's inabili...

6.1CVSS5.6AI score0.01338EPSS
SaveExploits2References5
NVD
NVD
•added 2020/11/23 5:15 p.m.•31 views

CVE-2020-6939

Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account takeover for users of that site. Tableau Server versions...

10CVSS9.4AI score0.01841EPSS
SaveExploits0References1
OSV
OSV
•added 2020/11/23 5:15 p.m.•12 views

CVE-2020-6939

Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account takeover for users of that site. Tableau Server versions...

9.8CVSS7.3AI score0.01841EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/11/23 5:15 p.m.•9 views

CVE-2020-6939

Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account takeover for users of that site. Tableau Server versions...

10CVSS8.4AI score0.01841EPSS
SaveExploits0References2
Prion
Prion
•added 2020/11/23 5:15 p.m.•24 views

Code injection

Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account takeover for users of that site. Tableau Server versions...

10CVSS9.3AI score0.01841EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/11/23 4:16 p.m.•143 views

CVE-2020-6939

CVE-2020-6939 affects Tableau Server installations with Site-Specific SAML and allows the APIs to be used by unauthenticated users. The vulnerability could enable an attacker to configure Site-Specific SAML settings and potentially take over user accounts on the affected site. Affected versions o...

10CVSS9.3AI score0.01841EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder