TI-2025-32578 Aliases CVE-2025-52450 GHSA-699j-c85p-xv8w

Path traversal in Salesforce Tableau Server

LOW 29CWE-22Published 2025-08-22 · Updated 2025-08-27

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.

Summary

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0043 37th percentileScored 2026-11-07

Fix Fixed Tableau Server (Salesforce): 2025.1.3, 2024.2.12, 2023.3.19

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Salesforce	Tableau Server	before 2025.1.3; before 2024.2.12; before 2023.3.19	2025.1.3, 2024.2.12, 2023.3.19	Patch available	CNA

Tableau Server VendorSalesforce Affected before 2025.1.3; before 2024.2.12; before 2023.3.19 Fixed in 2025.1.3, 2024.2.12, 2023.3.19 Patch available CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:tableau:tableau_server::::::::	before 2023.3.19; 2024.2 to before 2024.2.12; 2025.1 to before 2025.1.3	Vulnerable	Tableau
cpe:2.3:o:linux:linux_kernel:-:::::::*	not specified by NVD	Running on	Linux
cpe:2.3:o:microsoft:windows:-:::::::*	not specified by NVD	Running on	Microsoft

cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:* Versions before 2023.3.19; 2024.2 to before 2024.2.12; 2025.1 to before 2025.1.3 Vulnerable ·Tableau
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

Fix · CNA Tableau Server (Salesforce) Fixed in 2025.1.3, 2024.2.12, 2023.3.19

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2025-08-22
Salesforce Tableau Server 2023.3.19, 2024.2.12, 2025.1.3
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2025-32579 Improper input validation in Salesforce Tableau ServerPriority LOW 36
- TI-2025-19443 Unrestricted file upload in Salesforce Tableau ServerPriority LOW 32
- TI-2025-19442 Unrestricted file upload in Salesforce Tableau ServerPriority LOW 32
Show all 4 records →

Timeline

2026-10-02 Threatist record created from CVE-2025-52450
2026-10-03 Alias added: GHSA-699j-c85p-xv8w

References

Advisory 1

https://help.salesforce.com/s/articleView?id=005132575&type=1

TI-2023-11360 Prototype pollution in tough-cookie CVSS 3.1CRITICAL 9.8
TI-2026-18147 Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement… CVSS 3.1CRITICAL 9.8
TI-2026-18144 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')… CVSS 3.1CRITICAL 9.8
TI-2026-18143 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')… CVSS 3.1CRITICAL 9.8
TI-2016-09132 forcedotcom SalesforceMobileSDK-Windows QuerySpec.cs ComputeCountSql sql injection CVSS 3.1CRITICAL 9.8
TI-2026-18146 Broken or risky cryptographic algorithm in Salesforce Marketing Cloud Engagement CVSS 3.1CRITICAL 9.8

See all 43 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences