NVD

Id
29903  
Name
CVE-2014-1204  
Description
SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be exploited by unauthenticated remote attackers if the guest user is enabled.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-01-31  
Modified Date
2014-08-11  
Seq
2014-1204  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
157660 29903 CVE-2014-1204 31578  View
157661 29903 CVE-2014-1204 65171  View
157662 29903 CVE-2014-1204 1029706  View
157663 29903 CVE-2014-1204 http://www.tableausoftware.com/support/releases/8.0.7  View
157664 29903 CVE-2014-1204 http://www.tableausoftware.com/support/releases/812  View
157665 29903 CVE-2014-1204 tableau-server-cve20141204-sql-injection(90730)  View
157666 29903 CVE-2014-1204 https://www.trustwave.com/spiderlabs/advisories/TWSL2014-003.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12425 JVNDB-2014-001300 Tableau Server における SQL インジェクションの脆弱性 Tableau Server には、SQL インジェクションの脆弱性が存在します。 CVE-2014-1204 68490 CVE-2014-1204 29903 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001300.html 2014-01-08 2014-02-04 View