Approved changes feed: RSS · Atom

cpe:2.3:a:salesforce:tableau_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSalesforce (cfdafdea-90cf-5590-ad24-239f205b7d02)
ProductTableau Server (0d0eca8e-56a2-5809-8cdd-fb0f742faecf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-52455 vulnerable 2026-06-08 07:31:11.614427 Details available
Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Published: 2025-07-25T19:11:47.772Z
Updated: 2025-07-25T20:35:15.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52454 vulnerable 2026-06-08 07:31:11.613960 Details available
Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Published: 2025-07-25T19:08:59.366Z
Updated: 2026-03-23T20:15:14.290Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52453 vulnerable 2026-06-08 07:31:11.613510 Details available
Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Published: 2025-07-25T19:05:50.905Z
Updated: 2025-07-25T20:13:23.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52452 vulnerable 2026-06-08 07:31:11.613178 Details available
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source modules) allows Absolute Path Traversal. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Published: 2025-07-25T19:00:05.794Z
Updated: 2025-07-25T20:09:34.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52451 vulnerable 2026-06-08 07:31:11.612661 Details available
Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Published: 2025-08-22T20:20:12.596Z
Updated: 2025-08-22T21:03:09.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52450 vulnerable 2026-06-08 07:31:11.612009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52449 vulnerable 2026-06-08 07:31:11.611357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52448 vulnerable 2026-06-08 07:31:11.610768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52447 vulnerable 2026-06-08 07:31:11.610177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52446 vulnerable 2026-06-08 07:31:11.606106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26498 vulnerable 2026-06-08 07:12:51.982199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26497 vulnerable 2026-06-08 07:12:51.974033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26495 vulnerable 2026-06-08 07:12:51.971769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26494 vulnerable 2026-06-08 07:12:51.970253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.