CVE-2025-26498 — Salesforce / Tableau Server

CVE-2025-26498

Salesforce / Tableau Server PUBLISHED

Description (CNA)

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Affected (CNA)

Vendor / product	Versions
Salesforce / Tableau Server	affected 0 before 2025.1.3; affected 0 before 2024.2.12; affected 0 before 2023.3.19

CWE

CWE-434

References

https://help.salesforce.com/s/articleView?id=005132575&type=1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.