Path Traversal Vulnerability in Salesforce Tableau Server
CVE-2025-52452

8.5HIGH

Key Information:

Vendor

Salesforce

Status
Tableau Server
Vendor
CVE Published:
25 July 2025

What is CVE-2025-52452?

A path traversal vulnerability has been identified in Salesforce Tableau Server across multiple operating systems including Windows and Linux. This flaw allows an attacker to access restricted directories on the server by exploiting improper pathname limitations, enabling absolute path traversal. The vulnerability specifically affects various versions of Tableau Server prior to 2025.1.3, 2024.2.12, and 2023.3.19, raising significant security concerns for users relying on these outdated versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Tableau Server Windows 0 < 2025.1.3

Tableau Server Windows 0 < 2024.2.12

Tableau Server Windows 0 < 2023.3.19

References

https://help.salesforce.com/s/articleView?id=005105043&ty...

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.