CVE-2025-52448 — Salesforce / Tableau Server

CVE-2025-52448

Salesforce / Tableau Server PUBLISHED

Description (CNA)

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-initial-sql api modules) allows Interface Manipulation (data access to the production database cluster). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Affected (CNA)

Vendor / product	Versions
Salesforce / Tableau Server	affected 0 before 2025.1.3; affected 0 before 2024.2.12; affected 0 before 2023.3.19

CWE

CWE-639

References

https://help.salesforce.com/s/articleView?id=005105043&type=1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.