Server-Side Request Forgery Vulnerability in Salesforce Tableau Server
CVE-2025-52454

8.2HIGH

Key Information:

Vendor

Salesforce

Status
Tableau Server
Vendor
CVE Published:
25 July 2025

What is CVE-2025-52454?

A Server-Side Request Forgery (SSRF) vulnerability exists in Salesforce Tableau Server, specifically within the Amazon S3 Connector modules. This flaw allows an attacker to manipulate resource requests, potentially leading to unauthorized access to internal resources and sensitive data. It affects various Tableau Server versions, including those prior to 2025.1.3, 2024.2.12, and 2023.3.19. Mitigating this issue requires immediate action to update affected installations to secure versions.

Affected Version(s)

Tableau Server Windows 0 < 2025.1.3

Tableau Server Windows 0 < 2024.2.12

Tableau Server Windows 0 < 2023.3.19

References

https://help.salesforce.com/s/articleView?id=005105043&ty...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.