CVE-2019-15637

Name of the Vulnerable Software and Affected Versions Tableau Server (affected versions not specified) Tableau Desktop (affected versions not specified) Tableau Reader (affected versions not specified) Tableau Public Desktop (affected versions not specified)

Description The issue allows for XXE (XML External Entity) attacks via malicious workbooks, extensions, or data sources. This can result in information disclosure or a denial of service (DoS).

Recommendations For Tableau Server, update to a version that includes a fix for this issue. For Tableau Desktop, update to a version that includes a fix for this issue. For Tableau Reader, update to a version that includes a fix for this issue. For Tableau Public Desktop, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting the use of external workbooks, extensions, or data sources until a patch is available.