Tableau Server 10.3 up to and including 2019.4 on Windows and Linux allows XSS via the embeddedAuthRedirect page.
tableau tableau_server