VDB
CVE-2022-22128
CVE-2022-22128
PUBLISHED
CVSS 9.8 CRITICAL
Reported by Salesforce · Published October 17, 2022
Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer service that could allow remote code execution.Tableau only supports product versions for 24 months after release. Older versions have reached their End of Life and are no longer supported. They are also not assessed for potential security issues and do not receive security updates.
Risk Scores
CVSS 3.1
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Tableau Server | 2022.1 - 2022.1.42021.4 - 2021.4.92021.3 - 2021.3.142021.2 - 2021.2.152021.1 - 2021.1.172020.4 - 2020.4.20 |
| n/a | Tableau Server | 2022.1 - 2022.1.42021.4 - 2021.4.92021.3 - 2021.3.142021.2 - 2021.2.152021.1 - 2021.1.172020.4 - 2020.4.20 |
Timeline
- Oct 17, 2022 CVE Published
- Oct 18, 2022 EPSS Score
- Oct 20, 2022 EPSS Score
- Jan 15, 2023 EPSS Score
- Feb 28, 2023 EPSS Score
- Apr 13, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 11, 2023 EPSS Score
- Oct 7, 2023 EPSS Score
- Nov 21, 2023 EPSS Score
- Feb 17, 2024 EPSS Score
- Apr 2, 2024 EPSS Score