| Package | Affected versions | Patched versions |
|---|---|---|
| tableau desktop | ≥ 10.2, ≤ 10.2.23≥ 10.3, ≤ 10.3.23≥ 10.4, ≤ 10.4.19≥ 10.5, ≤ 10.5.18≥ 2018.1, ≤ 2018.1.15≥ 2018.2, ≤ 2018.2.12≥ 2018.3, ≤ 2018.3.9≥ 2019.1, ≤ 2019.1.6≥ 2019.2, ≤ 2019.2.2 | |
| tableau public desktop | ≥ 10.2, ≤ 10.2.2 | |
| tableau reader | ≥ 10.2, ≤ 10.2.2 | |
| tableau server | ≥ 10.2, ≤ 10.2.23≥ 10.3, ≤ 10.3.23≥ 10.4, ≤ 10.4.19≥ 10.5, ≤ 10.5.18≥ 2018.1, ≤ 2018.1.15≥ 2018.2, ≤ 2018.12≥ 2018.3, ≤ 2018.3.9≥ 2019.1, ≤ 2019.1.6≥ 2019.2, ≤ 2019.2.2 |
Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free