tableau server vulnerabilities and fixes

Recent CVEs affecting tableau server, with upgrade or downgrade steps. 15 tracked.

Also searched as: tableauserver.

tableau server has 15 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 15. Most recent: 2025-08-22. Highest priority: CVE-2025-52448 (score 42/100).

• CVE-2025-52455 MEDIUM 5.3 UPGRADE Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server mo
• CVE-2025-52454 HIGH 8.2 UPGRADE Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Con
• CVE-2025-52453 HIGH 8.2 UPGRADE Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Sou
• CVE-2025-52452 HIGH 8.5 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tab
• CVE-2025-52451 HIGH 8.5 UPGRADE Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-da
• CVE-2025-52450 MEDIUM 6.5 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tab
• CVE-2025-52449 HIGH 8.5 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (
• CVE-2025-52448 HIGH 8.1 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux
• CVE-2025-52447 HIGH 8.1 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux
• CVE-2025-52446 HIGH 8.0 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux
• CVE-2025-26498 HIGH 7.3 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (
• CVE-2025-26497 HIGH 7.3 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (
• CVE-2025-26496 CRITICAL 9.3 UPGRADE Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tabl
• CVE-2025-26495 HIGH 7.5 UPGRADE Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal
• CVE-2025-26494 HIGH 7.7 UPGRADE Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server allows Authentication Bypass.Thi

FAQ

How do I fix tableau server vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is tableau server being exploited right now?

None of the tracked tableau server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which tableau server CVE should I patch first?

CVE-2025-52448 currently ranks highest (42/100): Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux .

RSS feed for tableau server · ← Back to latest CVEs