Server-Side Request Forgery in Salesforce Tableau Server
CVE-2025-52453

8.2HIGH

Key Information:

Vendor

Salesforce

Status
Tableau Server
Vendor
CVE Published:
25 July 2025

What is CVE-2025-52453?

A Server-Side Request Forgery (SSRF) vulnerability exists in the Salesforce Tableau Server, allowing attackers to manipulate server requests and potentially spoof resource locations. This vulnerability is present in multiple versions of Tableau Server prior to 2025.1.3, 2024.2.12, and 2023.3.19. It is crucial for users and organizations to be vigilant and apply the appropriate updates to mitigate potential exploits.

Affected Version(s)

Tableau Server Windows 0 < 2025.1.3

Tableau Server Windows 0 < 2024.2.12

Tableau Server Windows 0 < 2023.3.19

References

https://help.salesforce.com/s/articleView?id=005105043&ty...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-52453 : Server-Side Request Forgery in Salesforce Tableau Server