CVE-2014-1204

Опубликовано: 31 янв. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be exploited by unauthenticated remote attackers if the guest user is enabled.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tableausoftware:tableau_server:8.0:*:*:*:*:*:*:*

cpe:2.3:a:tableausoftware:tableau_server:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:tableausoftware:tableau_server:8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:tableausoftware:tableau_server:8.0.3:*:*:*:*:*:*:*

cpe:2.3:a:tableausoftware:tableau_server:8.0.4:*:*:*:*:*:*:*

cpe:2.3:a:tableausoftware:tableau_server:8.0.5:*:*:*:*:*:*:*

cpe:2.3:a:tableausoftware:tableau_server:8.0.6:*:*:*:*:*:*:*

cpe:2.3:a:tableausoftware:tableau_server:8.1:*:*:*:*:*:*:*

cpe:2.3:a:tableausoftware:tableau_server:8.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02325

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-6fqq-x36x-xjj8

github

больше 3 лет назад