Server-Side Request Forgery Vulnerability in Salesforce Tableau Server
CVE-2025-52454

5.3MEDIUM

Key Information:

Vendor

Salesforce

Status
Tableau Server
Vendor
CVE Published:
25 July 2025

What is CVE-2025-52454?

A Server-Side Request Forgery (SSRF) vulnerability exists in Salesforce Tableau Server, specifically within the Amazon S3 Connector modules. This flaw allows an attacker to manipulate resource requests, potentially leading to unauthorized access to internal resources and sensitive data. It affects various Tableau Server versions, including those prior to 2025.1.3, 2024.2.12, and 2023.3.19. Mitigating this issue requires immediate action to update affected installations to secure versions.

Affected Version(s)

Tableau Server Windows 0 < 2025.1.3

Tableau Server Windows 0 < 2024.2.12

Tableau Server Windows 0 < 2023.3.19

References

https://help.salesforce.com/s/articleView?id=005105043&ty...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-52454 : Server-Side Request Forgery Vulnerability in Salesforce Tableau Server