Browse CVEs

HIGH 8.5 CVE-2025-52451 Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) all… Tableau Server 2023.3.19 / 2024.2.12+ Fix from $1,9502025-08-22 MEDIUM 6.5 CVE-2025-52450 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc ap… Tableau Server 2023.3.19 / 2024.2.12+ Fix from $1,6002025-08-22 CRITICAL 9.3 CVE-2025-26496 Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File Upl… Tableau Server 2023.3.19 / 2024.2.12+ Fix from $2,3002025-08-22 HIGH 7.3 CVE-2025-26497 Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Pa… Tableau Server 2023.3.19 / 2024.2.12+ Fix from $1,9502025-08-22 HIGH 7.3 CVE-2025-26498 Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) a… Tableau Server 2023.3.19 / 2024.2.12+ Fix from $1,9502025-08-22 HIGH 8.2 CVE-2025-52453 Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location S… Tableau Server 2023.3.19 / 2024.2.12+ Fix from $1,9502025-07-25 HIGH 8.2 CVE-2025-52454 Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector modules) allows Resource Locatio… Tableau Server 2023.3.19 / 2024.2.12+ Fix from $1,9502025-07-25 MEDIUM 5.3 CVE-2025-52455 Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofin… Tableau Server 2023.3.19 / 2024.2.12+ Fix from $1,6002025-07-25 HIGH 8.5 CVE-2025-52449 Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) al… Tableau Server 2023.3.19 / 2024.2.12+ Fix from $1,9502025-07-25 HIGH 8.5 CVE-2025-52452 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc a… Tableau Server 2023.3.19 / 2024.2.12+ Fix from $1,9502025-07-25 HIGH 8.1 CVE-2025-52447 Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (set-initial-sql tabdoc command modules… Tableau Server 2023.3.19 / 2024.2.12+ Fix from $1,9502025-07-25 HIGH 8.1 CVE-2025-52448 Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-initial-sql api modules) allo… Tableau Server 2023.3.19 / 2024.2.12+ Fix from $1,9502025-07-25 HIGH 8.0 CVE-2025-52446 Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface … Tableau Server 2023.3.19 / 2024.2.12+ Fix from $1,9502025-07-25 HIGH 7.7 CVE-2025-26494 Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 20… Tableau Server after 2023.3.5 Fix from $1,9502025-02-11 HIGH 7.5 CVE-2025-26495 Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token (PAT) into logging reposit… Tableau Server 2020.4.19 / 2021.1.16+ Fix from $1,9502025-02-11 CRITICAL 9.8 CVE-2022-22128 Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer service that could allow rem… Tableau Server after 2022.1.4 Fix from $2,3002022-10-17 HIGH 7.2 CVE-2022-22127 Tableau is aware of a broken access control vulnerability present in Tableau Server affecting Tableau Server customers using Local Identity Store for… Tableau Server after 2021.4.4 Fix from $1,9502022-05-25 MEDIUM 6.1 CVE-2021-1629 Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users. Tableau Server 2019.4.18 / 2020.1.15+ Fix from $1,6002021-03-26 CRITICAL 9.8 CVE-2020-6939 Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could al… Tableau Server after 2020.3.2 Fix from $2,3002020-11-23 HIGH 7.5 CVE-2020-6938 A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26, 2020, could allow access to … Tableau Server after 2020.2 Fix from $1,9502020-07-08 MEDIUM 6.1 CVE-2019-19719EPSS 22% Tableau Server 10.3 through 2019.4 on Windows and Linux allows XSS via the embeddedAuthRedirect page. Tableau Server after 2019.4 Fix from $1,6002019-12-11 HIGH 8.1 CVE-2019-15637EPSS 14% Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This… Tableau Server after 2019.2.2 Fix from $1,9502019-08-26