Improper Input Validation Vulnerability in Tableau Server by Salesforce
CVE-2025-52451

8.5HIGH

Key Information:

Vendor

Salesforce

Status
Tableau Server
Vendor
CVE Published:
22 August 2025

What is CVE-2025-52451?

An improper input validation vulnerability has been identified in Salesforce's Tableau Server that allows for Absolute Path Traversal through the tabdoc API modules responsible for file uploads. This vulnerability affects specific versions of Tableau Server, enabling malicious actors to potentially access restricted files on the server.

Affected Version(s)

Tableau Server Windows 0 < 2025.1.3

Tableau Server Windows 0 < 2024.2.12

Tableau Server Windows 0 < 2023.3.19

References

https://help.salesforce.com/s/articleView?id=005132575&ty...

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.