CVE-2021-1629

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

VendorProductVersions
n/aTableauTableau Server versions affected on both Windows and Linux are: 2019.4 through 2019.4.17 2020.1 through 2020.1.13 2020.2 through 2020.2.10 2020.3 through 2020.3.6 2020.4 through 2020.4.2

References

Timeline

Published
Mar 26, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-16307.5XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime FCVE-2021-16368.8Microsoft SQL Elevation of Privilege VulnerabilityCVE-2021-16375.5Windows DNS Query Information Disclosure VulnerabilityCVE-2021-16387.7Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerabCVE-2021-16397.0Visual Studio Code Remote Code Execution VulnerabilityCVE-2021-16407.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-16414.6Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-16427.8Windows AppX Deployment Extensions Elevation of Privilege VulnerabilityCVE-2021-16437.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-16447.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-16455.0Windows Docker Information Disclosure VulnerabilityCVE-2021-16466.6Windows WLAN Service Elevation of Privilege Vulnerability
CVE-2021-1629: Medium severity, CVSS 6.1 | Vulnix