Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Salesforce Tableau Server 2023.3.19, 2024.2.12, 2025.1.3 Clear all filters
TI-2025-32579 CVE-2025-52451 · GHSA-wh5c-wfpr-wpfp

Improper input validation in Salesforce Tableau Server

Priority LOW 36

Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2…

CVSS 3.1HIGH 8.5 Adjacent network No auth User interaction EPSS 0.00215 Published 2025-08-22 Fixed in 2025.1.3, 2024.2.12 +1 CWE-20
TI-2025-32578 CVE-2025-52450 · GHSA-699j-c85p-xv8w

Path traversal in Salesforce Tableau Server

Priority LOW 29

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc api - create-data-source-from-file-upload modules) allows Absolute Path T…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0043 Published 2025-08-22 Fixed in 2025.1.3, 2024.2.12 +1 CWE-22
TI-2025-19443 CVE-2025-26498 · GHSA-6wgv-qx3g-27rc

Unrestricted file upload in Salesforce Tableau Server

Priority LOW 32

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows Absolute Path Traversal.This issue affects Tableau Server: before…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00285 Published 2025-08-22 Fixed in 2025.1.3, 2024.2.12 +1 CWE-434
TI-2025-19442 CVE-2025-26497 · GHSA-29w3-3m4v-phcw

Unrestricted file upload in Salesforce Tableau Server

Priority LOW 32

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00285 Published 2025-08-22 Fixed in 2025.1.3, 2024.2.12 +1 CWE-434