CVE-2021-1629

low-risk

Published 2021-03-26

Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users.

Do I need to act?

0.29% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.1/10 Medium

NETWORK / LOW complexity

Tableau Server

Tableau

Exploit http://packetstormsecurity.com/files/162138/Tableau-Server-Open-Redirection.html

Mailing List http://seclists.org/fulldisclosure/2021/Apr/22

Vendor Advisory https://help.salesforce.com/articleView?id=000357424&type=1&mode=1

Exploit http://packetstormsecurity.com/files/162138/Tableau-Server-Open-Redirection.html

Mailing List http://seclists.org/fulldisclosure/2021/Apr/22

Vendor Advisory https://help.salesforce.com/articleView?id=000357424&type=1&mode=1

/ 100

low-risk

Severity 23/34 · High

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal