Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Release: Salesforce Tableau Server 2023.3.19, 2024.2.12, 2025.1.3 Clear all filters
TI-2025-32583 CVE-2025-52455 · GHSA-5qmx-q2qr-mcr2

Server-side request forgery in Salesforce Tableau Server

Priority LOW 24

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0037 Published 2025-07-25 Fixed in 2025.1.3, 2024.2.12 +1 CWE-918
TI-2025-32582 CVE-2025-52454 · GHSA-q52c-qm5x-cgwj

Server-side request forgery in Salesforce Tableau Server

Priority LOW 38

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector modules) allows Resource Location Spoofing.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00338 Published 2025-07-25 Fixed in 2025.1.3, 2024.2.12 +1 CWE-918
TI-2025-32581 CVE-2025-52453 · GHSA-7hjp-7485-cfwx

Server-side request forgery in Salesforce Tableau Server

Priority LOW 36

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00338 Published 2025-07-25 Fixed in 2025.1.3, 2024.2.12 +1 CWE-918
TI-2025-32580 CVE-2025-52452 · GHSA-2836-rjcm-28p3

Path traversal in Salesforce Tableau Server

Priority LOW 39

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source modules) allows Absolute Path Traversal.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00488 Published 2025-07-25 Fixed in 2025.1.3, 2024.2.12 +1 CWE-22
TI-2025-32577 CVE-2025-52449 · GHSA-q9cp-w5fg-wv3j

Unrestricted file upload in Salesforce Tableau Server

Priority LOW 39

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows Alternative Execution Due to Deceptive Filenames (RCE).

CVSS 3.1HIGH 8.5 Adjacent network No auth User interaction EPSS 0.00286 Published 2025-07-25 Fixed in 2025.1.3, 2024.2.12 +1 CWE-434
TI-2025-32576 CVE-2025-52448 · GHSA-vv7w-fwvc-gwhj

Authorization bypass in Salesforce Tableau Server

Priority LOW 38

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-initial-sql api modules) allows Interface Manipulation (data access to the production database clust…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00424 Published 2025-07-25 Fixed in 2025.1.3, 2024.2.12 +1 CWE-639
TI-2025-32575 CVE-2025-52447 · GHSA-m77x-qwf3-vq9r

Authorization bypass in Salesforce Tableau Server

Priority LOW 38

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (set-initial-sql tabdoc command modules) allows Interface Manipulation (data access to the production database…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00419 Published 2025-07-25 Fixed in 2025.1.3, 2024.2.12 +1 CWE-639
TI-2025-32574 CVE-2025-52446 · GHSA-44qf-8mxq-79c8

Authorization bypass in Salesforce Tableau Server

Priority LOW 37

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface Manipulation (data access to the production database cluster).This issu…

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00275 Published 2025-07-25 Fixed in 2025.1.3, 2024.2.12 +1 CWE-639