8
/ 10
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface Manipulation (data access to the production database cluster).This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Basic Information
ID
CVE-2025-52446
Source
Salesforce
Published
Jul 25, 2025 at 18:43
Modified
Jul 25, 2025 at 18:59
Affected Product
Vendor
Salesforce
Product
Tableau Server
Affected Versions
Salesforce Tableau Server 0
Salesforce Tableau Server 0
Salesforce Tableau Server 0
Salesforce Tableau Server 0
Salesforce Tableau Server 0