CVE-2025-52446 — Salesforce / Tableau Server

CVE-2025-52446

Salesforce / Tableau Server PUBLISHED

Description (CNA)

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface Manipulation (data access to the production database cluster).This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Affected (CNA)

Vendor / product	Versions
Salesforce / Tableau Server	affected 0 before 2025.1.3; affected 0 before 2024.2.12; affected 0 before 2023.3.19

CWE

CWE-639

References

https://help.salesforce.com/s/articleView?id=005105043&type=1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.