CVE-2025-52446

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-52446
Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface Manipulation (data access to the production database cluster).This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

8.0 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://help.salesforce.com/s/articleView?id=005105043&type=1
Configurations

No configuration.

History

29 Jul 2025, 14:14

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de omisión de autorización a través de una clave controlada por el usuario en Salesforce Tableau Server en Windows, Linux (módulos de API tab-doc) permite la manipulación de la interfaz (acceso a los datos del clúster de la base de datos de producción). Este problema afecta a Tableau Server: antes de 2025.1.3, antes de 2024.2.12, antes de 2023.3.19.

25 Jul 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-25 19:15

Updated : 2025-07-29 14:14

NVD link : CVE-2025-52446

Mitre link : CVE-2025-52446

CVE.ORG link : CVE-2025-52446

JSON object : View

Products Affected

No product.

CWE
CWE-639

Authorization Bypass Through User-Controlled Key