Vulnerability Details CVE-2021-1629
Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.9%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 5.8
References
- http://packetstormsecurity.com/files/162138/Tableau-Server-Open-Redirection.html
- http://seclists.org/fulldisclosure/2021/Apr/22
- https://help.salesforce.com/articleView?id=000357424&type=1&mode=1
- http://packetstormsecurity.com/files/162138/Tableau-Server-Open-Redirection.html
- http://seclists.org/fulldisclosure/2021/Apr/22
- https://help.salesforce.com/articleView?id=000357424&type=1&mode=1
Products affected by CVE-2021-1629
-
cpe:2.3:a:tableau:tableau_server:2019.4
-
cpe:2.3:a:tableau:tableau_server:2019.4.1
-
cpe:2.3:a:tableau:tableau_server:2019.4.10
-
cpe:2.3:a:tableau:tableau_server:2019.4.11
-
cpe:2.3:a:tableau:tableau_server:2019.4.12
-
cpe:2.3:a:tableau:tableau_server:2019.4.13
-
cpe:2.3:a:tableau:tableau_server:2019.4.17
-
cpe:2.3:a:tableau:tableau_server:2019.4.2
-
cpe:2.3:a:tableau:tableau_server:2019.4.3
-
cpe:2.3:a:tableau:tableau_server:2019.4.4
-
cpe:2.3:a:tableau:tableau_server:2019.4.5
-
cpe:2.3:a:tableau:tableau_server:2019.4.6
-
cpe:2.3:a:tableau:tableau_server:2019.4.7
-
cpe:2.3:a:tableau:tableau_server:2019.4.8
-
cpe:2.3:a:tableau:tableau_server:2019.4.9
-
cpe:2.3:a:tableau:tableau_server:2020.1
-
cpe:2.3:a:tableau:tableau_server:2020.1.1
-
cpe:2.3:a:tableau:tableau_server:2020.1.10
-
cpe:2.3:a:tableau:tableau_server:2020.1.13
-
cpe:2.3:a:tableau:tableau_server:2020.1.2
-
cpe:2.3:a:tableau:tableau_server:2020.1.3
-
cpe:2.3:a:tableau:tableau_server:2020.1.4
-
cpe:2.3:a:tableau:tableau_server:2020.1.5
-
cpe:2.3:a:tableau:tableau_server:2020.1.6
-
cpe:2.3:a:tableau:tableau_server:2020.1.7
-
cpe:2.3:a:tableau:tableau_server:2020.1.8
-
cpe:2.3:a:tableau:tableau_server:2020.1.9
-
cpe:2.3:a:tableau:tableau_server:2020.2
-
cpe:2.3:a:tableau:tableau_server:2020.2.1
-
cpe:2.3:a:tableau:tableau_server:2020.2.10
-
cpe:2.3:a:tableau:tableau_server:2020.2.2
-
cpe:2.3:a:tableau:tableau_server:2020.2.3
-
cpe:2.3:a:tableau:tableau_server:2020.2.4
-
cpe:2.3:a:tableau:tableau_server:2020.2.5
-
cpe:2.3:a:tableau:tableau_server:2020.2.6
-
cpe:2.3:a:tableau:tableau_server:2020.2.7
-
cpe:2.3:a:tableau:tableau_server:2020.3
-
cpe:2.3:a:tableau:tableau_server:2020.3.1
-
cpe:2.3:a:tableau:tableau_server:2020.3.2
-
cpe:2.3:a:tableau:tableau_server:2020.3.3
-
cpe:2.3:a:tableau:tableau_server:2020.3.6
-
cpe:2.3:a:tableau:tableau_server:2020.4
-
cpe:2.3:a:tableau:tableau_server:2020.4.1
-
cpe:2.3:a:tableau:tableau_server:2020.4.2
-
cpe:2.3:o:linux:linux_kernel:-
-
cpe:2.3:o:microsoft:windows:-