CVE-2014-1204
Last modified
CVE-2014-1204 is a vulnerability of currently unknown severity. SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be exploited by unauthenticated remote attackers if the guest user is enabled.. EPSS estimates a 4.30% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be exploited by unauthenticated remote attackers if the guest user is enabled.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tableausoftware | Tableau Server | 8.0 |
| Tableausoftware | Tableau Server | 8.0.1 |
| Tableausoftware | Tableau Server | 8.0.2 |
| Tableausoftware | Tableau Server | 8.0.3 |
| Tableausoftware | Tableau Server | 8.0.4 |
| Tableausoftware | Tableau Server | 8.0.5 |
| Tableausoftware | Tableau Server | 8.0.6 |
| Tableausoftware | Tableau Server | 8.1 |
| Tableausoftware | Tableau Server | 8.1.1 |
References
- http://secunia.com/advisories/56620Vendor Advisory
- http://www.tableausoftware.com/support/releases/812Vendor Advisory
- http://secunia.com/advisories/56620Vendor Advisory
- http://www.tableausoftware.com/support/releases/812Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-1204?
How severe is CVE-2014-1204?
How do I fix CVE-2014-1204?
Are you affected by CVE-2014-1204?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST