What’s Vulnerable › Vulnerabilities

CVE-2019-19719

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 22.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-12-11 · updated 2026-06-17
• Weakness: CWE-79

Description

Tableau Server 10.3 through 2019.4 on Windows and Linux allows XSS via the embeddedAuthRedirect page.

Affected products

• Salesforce Tableau Server: from 10.3 through 2019.4

References

• https://community.tableau.com/community/security-bulletins/blog/2019/11/19/important-adv-2019-047-open-redirect-on-embeddedauthredirect-page
• https://community.tableau.com/community/security-bulletins/blog/2019/11/19/important-adv-2019-047-open-redirect-on-embeddedauthredirect-page

Get alerted when CVE-2019-19719 or the next vulnerability affects your stack