Authorization Bypass Vulnerability in Salesforce Tableau Server

CVE-2025-52447

What is CVE-2025-52447?

An authorization bypass vulnerability exists in Salesforce Tableau Server running on both Windows and Linux platforms. This flaw, which affects specific command modules, can be exploited to manipulate the interface, granting unauthorized access to sensitive data in the production database cluster. The affected versions of Tableau Server are those released before 2025.1.3, 2024.2.12, and 2023.3.19, emphasizing the importance of updating to the latest version to mitigate potential risks.

References