CVE-2019-15637: XEE

Q: What is CVE-2019-15637?

CVE-2019-15637 is a vulnerability in numerous Tableau products that allows for XML External Entity (XXE) attacks, leading to information disclosure or denial of service (DoS).

Q: What is the severity of CVE-2019-15637?

CVE-2019-15637 has a severity rating of 8.1 (high).

Q: How can CVE-2019-15637 be exploited?

CVE-2019-15637 can be exploited through a malicious workbook, extension, or data source containing an XML External Entity (XXE) attack payload.

Q: Is there a fix available for CVE-2019-15637?

Yes, Tableau has released security updates to address the CVE-2019-15637 vulnerability. It is recommended to update to the latest version of Tableau products.

Published Aug 26, 2019

Updated

Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop.

Affected Software

23 affected components

Tableau Tableau Server>=10.5<=10.5.18

Tableau Tableau Server>=2018.1<=2018.1.15

Tableau Tableau Server>=2018.2<=2018.12

Tableau Tableau Server>=2018.3<=2018.3.9

Tableau Tableau Server>=2019.1<=2019.1.6

Tableau Tableau Server>=2019.2<=2019.2.2

Linux Linux kernel

Tableau Tableau Server>=10.2<=10.2.23

Tableau Tableau Server>=10.3<=10.3.23

Tableau Tableau Server>=10.4<=10.4.19

Microsoft Windows

Tableau Tableau Desktop>=10.2<=10.2.23

Tableau Tableau Desktop>=10.3<=10.3.23

Tableau Tableau Desktop>=10.4<=10.4.19

Tableau Tableau Desktop>=10.5<=10.5.18

Tableau Tableau Desktop>=2018.1<=2018.1.15

Tableau Tableau Desktop>=2018.2<=2018.2.12

Tableau Tableau Desktop>=2018.3<=2018.3.9

Tableau Tableau Desktop>=2019.1<=2019.1.6

Tableau Tableau Desktop>=2019.2<=2019.2.2

Apple macOS

Tableau Tableau Reader>=10.2<=10.2.2

Tableau Tableau Public Desktop>=10.2<=10.2.2

Event History

Aug 26, 2019

CVE Published

via MITRE·04:21 PM

Data Sourced

via MITRE·04:21 PM

DescriptionSeverity

Frequently Asked Questions

What is CVE-2019-15637?

CVE-2019-15637 is a vulnerability in numerous Tableau products that allows for XML External Entity (XXE) attacks, leading to information disclosure or denial of service (DoS).

Which Tableau products are affected by CVE-2019-15637?

Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop are affected by CVE-2019-15637.

What is the severity of CVE-2019-15637?

CVE-2019-15637 has a severity rating of 8.1 (high).

How can CVE-2019-15637 be exploited?

CVE-2019-15637 can be exploited through a malicious workbook, extension, or data source containing an XML External Entity (XXE) attack payload.

Is there a fix available for CVE-2019-15637?