TA
Vendor
Tableau
25
CVEs
0
On KEV
0
New 30D
Products
TS9.8
Tableau Server
Tableau
22 CVEs0 on KEV0 new
TD8.1
Tableau Desktop
Tableau
1 CVEs0 on KEV0 new
TP8.1
Tableau Public Desktop
Tableau
1 CVEs0 on KEV0 new
TR8.1
Tableau Reader
Tableau
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-52451 | TS Tableau Server Tableau | 8.5 | Aug 22 | Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) allows Absolute Path… |
| CVE-2025-52450 | TS Tableau Server Tableau | 6.5 | Aug 22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc api -… |
| CVE-2025-26498 | TS Tableau Server Tableau | 7.3 | Aug 22 | Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows Absolute Path… |
| CVE-2025-26497 | TS Tableau Server Tableau | 7.3 | Aug 22 | Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue… |
| CVE-2025-26496 | TS Tableau Server Tableau | 9.3 | Aug 22 | Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File Upload modules) allows Local Code… |
| CVE-2025-52455 | TS Tableau Server Tableau | 5.3 | Jul 25 | Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofing |
| CVE-2025-52454 | TS Tableau Server Tableau | 8.2 | Jul 25 | Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector modules) allows Resource Location Spoofing |
| CVE-2025-52453 | TS Tableau Server Tableau | 8.2 | Jul 25 | Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing |
| CVE-2025-52452 | TS Tableau Server Tableau | 8.5 | Jul 25 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source… |
| CVE-2025-52449 | TS Tableau Server Tableau | 8.5 | Jul 25 | Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows Alternative Execution Due… |
| CVE-2025-52448 | TS Tableau Server Tableau | 8.1 | Jul 25 | Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-initial-sql api modules) allows Interface Manipulation… |
| CVE-2025-52447 | TS Tableau Server Tableau | 8.1 | Jul 25 | Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (set-initial-sql tabdoc command modules) allows Interface… |
| CVE-2025-52446 | TS Tableau Server Tableau | 8.0 | Jul 25 | Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface Manipulation (data access to… |
| CVE-2025-26495 | TS Tableau Server Tableau | 7.5 | Feb 11 | Sensitive Data Exposure in Tableau Server |
| CVE-2025-26494 | TS Tableau Server Tableau | 7.7 | Feb 11 | Server Side Request Forgery vulnerability in Tableau Server |
| CVE-2022-22128 | TS Tableau Server Tableau | 9.8 | Oct 17 | Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer service that could allow remote code execution.Tableau… |
| CVE-2022-22127 | TS Tableau Server Tableau | 7.2 | May 25 | Tableau is aware of a broken access control vulnerability present in Tableau Server affecting Tableau Server customers using Local Identity Store for managing users |
| CVE-2021-1629 | TS Tableau Server Tableau | 6.1 | Mar 26 | Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users |
| CVE-2020-6939 | TS Tableau Server Tableau | 9.8 | Nov 23 | Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users |
| CVE-2020-6938 | TS Tableau Server Tableau | 7.5 | Jul 8 | A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26, 2020, could allow access to sensitive information in log… |
| CVE-2019-19719 | TS Tableau Server Tableau | 6.1 | Dec 11 | Tableau Server 10.3 through 2019.4 on Windows and Linux allows XSS via the embeddedAuthRedirect page |
| CVE-2019-15637 | TS Tableau Server Tableau | 8.1 | Aug 26 | Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS |