{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-24T10:44:47.399","vulnerabilities":[{"cve":{"id":"CVE-2021-1629","sourceIdentifier":"security@salesforce.com","published":"2021-03-26T17:15:12.780","lastModified":"2026-06-17T03:32:12.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users."},{"lang":"es","value":"Tableau Server no puede comprobar determinadas URL que están embebidas en los correos electrónicos enviados a usuarios de Tableau Server."}],"affected":[{"source":"security@salesforce.com","affectedData":[{"vendor":"n/a","product":"Tableau","versions":[{"version":"Tableau Server versions affected on both Windows and Linux are: 2019.4 through 2019.4.17 2020.1 through 2020.1.13 2020.2 through 2020.2.10 2020.3 through 2020.3.6 2020.4 through 2020.4.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2019.4","versionEndExcluding":"2019.4.18","matchCriteriaId":"388A8A90-AF80-4E88-8607-5A0904E61B10"},{"vulnerable":true,"criteria":"cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2020.1","versionEndExcluding":"2020.1.15","matchCriteriaId":"8203E31F-DDC5-4646-9DC1-4920E2E3E84E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2020.2","versionEndExcluding":"2020.2.12","matchCriteriaId":"5517AD17-3F21-43B3-956C-7E1016154530"},{"vulnerable":true,"criteria":"cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2020.3","versionEndExcluding":"2020.3.7","matchCriteriaId":"8C94514D-348F-474D-89A0-5C4D0041DD1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2020.4","versionEndExcluding":"2020.4.3","matchCriteriaId":"DEC00D02-0C3C-4E5E-9D79-81638AC9AFB4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2019.4","versionEndExcluding":"2019.4.18","matchCriteriaId":"388A8A90-AF80-4E88-8607-5A0904E61B10"},{"vulnerable":true,"criteria":"cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2020.1","versionEndExcluding":"2020.1.15","matchCriteriaId":"8203E31F-DDC5-4646-9DC1-4920E2E3E84E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2020.2","versionEndExcluding":"2020.2.12","matchCriteriaId":"5517AD17-3F21-43B3-956C-7E1016154530"},{"vulnerable":true,"criteria":"cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2020.3","versionEndExcluding":"2020.3.7","matchCriteriaId":"8C94514D-348F-474D-89A0-5C4D0041DD1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2020.4","versionEndExcluding":"2020.4.3","matchCriteriaId":"DEC00D02-0C3C-4E5E-9D79-81638AC9AFB4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/162138/Tableau-Server-Open-Redirection.html","source":"security@salesforce.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2021/Apr/22","source":"security@salesforce.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://help.salesforce.com/articleView?id=000357424&type=1&mode=1","source":"security@salesforce.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/162138/Tableau-Server-Open-Redirection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2021/Apr/22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://help.salesforce.com/articleView?id=000357424&type=1&mode=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}