3 matches found
CVE-2021-1629
Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users.
CVE-2019-19719
Tableau Server 10.3 through 2019.4 on Windows and Linux allows XSS via the embeddedAuthRedirect page.
CVE-2020-6939
Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account takeover for users of that site. Tableau Server versions affec...