CVE-2019-15637

HIGH

8.1

CVSS Score

Published: August 26, 2019 at 04:21 PM UTC

Updated: June 17, 2026 at 02:20 AM UTC

4 products affected across 1 vendorTableau ServerTableau Public DesktopTableau Desktop· also runs on 3 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.1

Exploit prediction

EPSS 14%

Description

Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Tableau Desktop · Tableau

95%

10.2 ≤ v ≤ 10.2.2310.3 ≤ v ≤ 10.3.2310.4 ≤ v ≤ 10.4.1910.5 ≤ v ≤ 10.5.182018.1 ≤ v ≤ 2018.1.152018.2 ≤ v ≤ 2018.2.122018.3 ≤ v ≤ 2018.3.92019.1 ≤ v ≤ 2019.1.62019.2 ≤ v ≤ 2019.2.2

apple-macos (environment) · microsoft-windows (environment)

Tableau Public Desktop · Tableau

95%

10.2 ≤ v ≤ 10.2.2

apple-macos (environment) · microsoft-windows (environment)

Tableau Reader · Tableau

95%

10.2 ≤ v ≤ 10.2.2

apple-macos (environment) · microsoft-windows (environment)

Tableau Server · Tableau

95%

10.2 ≤ v ≤ 10.2.2310.3 ≤ v ≤ 10.3.2310.4 ≤ v ≤ 10.4.1910.5 ≤ v ≤ 10.5.182018.1 ≤ v ≤ 2018.1.152018.2 ≤ v ≤ 2018.122018.3 ≤ v ≤ 2018.3.92019.1 ≤ v ≤ 2019.1.62019.2 ≤ v ≤ 2019.2.2

linux-linux-kernel (environment) · microsoft-windows (environment)