CVE-2014-1204

ALTO 7.5CVE-2014-1204 · Published 31/01/2014 · updated 17/06/2026

In breve

CVE-2014-1204 è una vulnerabilità ALTO (CVSS 7.5) che riguarda tableau server (tableausoftware).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.2%, superiore al 91.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
tableau server tableausoftware	`= 8.0= 8.0.1= 8.0.2= 8.0.3= 8.0.4= 8.0.5= 8.0.6= 8.1= 8.1.1`	No fix yet

Description

SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be exploited by unauthenticated remote attackers if the guest user is enabled.

References

osvdb.org/102568
secunia.com/advisories/56620 · Vendor Advisory
exploit-db.com/exploits/31578
securityfocus.com/bid/65171
securitytracker.com/id/1029706
tableausoftware.com/support/releases/8.0.7
tableausoftware.com/support/releases/812 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/90730
trustwave.com/spiderlabs/advisories/TWSL2014-003.txt

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free