DeutschShown in its original language — a full translation is planned for a future version.
Tableau Server und Desktop: Mehrere Schwachstellen
view advisory published 2025-08-24
Angreifer können mehrere Schwachstellen in Tableau Server und Desktop ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder andere nicht näher spezifizierte Angriffe durchzuführen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-52451US | — | — | ||
Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.Thi… | ||||
| CVE-2025-52450US | — | — | ||
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc api - create-data-source-from-fil… | ||||
| CVE-2025-26498US | — | — | ||
Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows Absolute Path Traversal.T… | ||||
| CVE-2025-26497US | — | — | ||
Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue affects… | ||||
| CVE-2025-26496US | — | — | ||
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File Upload modules) allows Local Code… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan