Login Request a demo
TS
Product
Tableau Server
by Salesforce · last CVE Aug 22, 2025
14
CVEs
0
On KEV
8.5
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 0High 12Medium 2Low 0
Severity
All severities14Critical0High12Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tableau Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-52451
8.5
0%
Aug 22
Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) allows Absolute Path…
Affected: before 2025.1.3; before 2024.2.12; before 2023.3.19
CVE-2025-52452
8.5
0%
Jul 25
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source…
Affected: before 2025.1.3; before 2024.2.12; before 2023.3.19
CVE-2025-52449
8.5
0%
Jul 25
Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows Alternative Execution Due…
Affected: before 2025.1.3; before 2024.2.12; before 2023.3.19
CVE-2025-52454
8.2
0%
Jul 25
Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector modules) allows Resource Location Spoofing
Affected: before 2025.1.3; before 2024.2.12; before 2023.3.19
CVE-2025-52453
8.2
0%
Jul 25
Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing
Affected: before 2025.1.3; before 2024.2.12; before 2023.3.19
CVE-2025-52448
8.1
0%
Jul 25
Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-initial-sql api modules) allows Interface Manipulation…
Affected: before 2025.1.3; before 2024.2.12; before 2023.3.19
CVE-2025-52447
8.1
0%
Jul 25
Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (set-initial-sql tabdoc command modules) allows Interface…
Affected: before 2025.1.3; before 2024.2.12; before 2023.3.19
CVE-2025-52446
8.0
0%
Jul 25
Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface Manipulation (data access to…
Affected: before 2025.1.3; before 2024.2.12; before 2023.3.19
CVE-2025-26494
7.7
1%
Feb 11
Server Side Request Forgery vulnerability in Tableau Server
Affected: 2023.3 through 2023.3.5
CVE-2025-26495
7.5
0%
Feb 11
Sensitive Data Exposure in Tableau Server
Affected: before 2022.1.3; before 2021.4.8; before 2021.3.13; before 2021.2.14; before 2021.1.16; before 2020.4.19
CVE-2025-26498
7.3
0%
Aug 22
Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows Absolute Path…
Affected: before 2025.1.3; before 2024.2.12; before 2023.3.19
CVE-2025-26497
7.3
0%
Aug 22
Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue…
Affected: before 2025.1.3; before 2024.2.12; before 2023.3.19
Showing 12