CVE-2014-1204
Last modified
CVE-2014-1204 is a vulnerability of currently unknown severity. SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be exploited by unauthenticated remote attackers if the guest user is enabled.. EPSS estimates a 4.30% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be exploited by unauthenticated remote attackers if the guest user is enabled.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tableausoftware | Tableau Server | 8.0 |
| Tableausoftware | Tableau Server | 8.0.1 |
| Tableausoftware | Tableau Server | 8.0.2 |
| Tableausoftware | Tableau Server | 8.0.3 |
| Tableausoftware | Tableau Server | 8.0.4 |
| Tableausoftware | Tableau Server | 8.0.5 |
| Tableausoftware | Tableau Server | 8.0.6 |
| Tableausoftware | Tableau Server | 8.1 |
| Tableausoftware | Tableau Server | 8.1.1 |
References
- http://secunia.com/advisories/56620Vendor Advisory
- http://www.tableausoftware.com/support/releases/812Vendor Advisory
- http://secunia.com/advisories/56620Vendor Advisory
- http://www.tableausoftware.com/support/releases/812Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-1204?
How severe is CVE-2014-1204?
How do I fix CVE-2014-1204?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-10402An issue was discovered in the DBI module through 1.643 for …6.1
- CVE-2014-1137Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2014-1155Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2014-1201Buffer overflow in the INetViewX ActiveX control in the Lore…
- CVE-2014-1202The WSDL/WADL import functionality in SoapUI before 4.6.4 al…
- CVE-2014-1203The get_login_ip_config_file function in Eyou Mail System be…9.8
- CVE-2014-1206SQL injection vulnerability in the password reset page in Op…
- CVE-2014-1207VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote…
- CVE-2014-1208VMware Workstation 9.x before 9.0.1, VMware Player 5.x befor…
- CVE-2014-1209VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1…
- CVE-2014-1210VMware vSphere Client 5.0 before Update 3 and 5.1 before Upd…
- CVE-2014-1211Cross-site request forgery (CSRF) vulnerability in VMware vC…
Are you affected by CVE-2014-1204?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST