CVE-2014-1204 SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be e...
HighCVSS 7.5
EPSS 4.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be exploited by unauthenticated remote attackers if the guest user is enabled.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tableausoftware tableau server | = 8.0 | No fix listed |
| tableausoftware tableau server | = 8.0.1 | No fix listed |
| tableausoftware tableau server | = 8.0.2 | No fix listed |
| tableausoftware tableau server | = 8.0.3 | No fix listed |
| tableausoftware tableau server | = 8.0.4 | No fix listed |
| tableausoftware tableau server | = 8.0.5 | No fix listed |
| tableausoftware tableau server | = 8.0.6 | No fix listed |
| tableausoftware tableau server | = 8.1 | No fix listed |
| tableausoftware tableau server | = 8.1.1 | No fix listed |
References
- 102568 vdb-entry
- 56620 third-party-advisory vendor-advisory
- 31578 exploit
- 65171 vdb-entry
- 1029706 vdb-entry
- www.tableausoftware.com
- www.tableausoftware.com vendor-advisory
- tableau-server-cve20141204-sql-injection(90730) vdb-entry
- www.trustwave.com