Path Traversal Vulnerability in Salesforce Tableau Server
CVE-2025-52452

8.5HIGH

Key Information:

Vendor

Salesforce

Vendor
CVE Published:
25 July 2025

What is CVE-2025-52452?

A path traversal vulnerability has been identified in Salesforce Tableau Server across multiple operating systems including Windows and Linux. This flaw allows an attacker to access restricted directories on the server by exploiting improper pathname limitations, enabling absolute path traversal. The vulnerability specifically affects various versions of Tableau Server prior to 2025.1.3, 2024.2.12, and 2023.3.19, raising significant security concerns for users relying on these outdated versions.

Affected Version(s)

Tableau Server Windows 0 < 2025.1.3

Tableau Server Windows 0 < 2024.2.12

Tableau Server Windows 0 < 2023.3.19

References

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-52452 : Path Traversal Vulnerability in Salesforce Tableau Server