CVE-2025-52448

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-52448
Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-initial-sql api modules) allows Interface Manipulation (data access to the production database cluster). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://help.salesforce.com/s/articleView?id=005105043&type=1
Configurations

No configuration.

History

29 Jul 2025, 14:14

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad omisión de autorización a través de una clave controlada por el usuario en Salesforce Tableau Server para Windows y Linux (módulos de la API de Validate-Initial-SQL) permite la manipulación de la interfaz (acceso a datos del clúster de la base de datos de producción). Este problema afecta a Tableau Server: versiones anteriores a 2025.1.3, 2024.2.12 y 2023.3.19.

25 Jul 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-25 19:15

Updated : 2025-07-29 14:14

NVD link : CVE-2025-52448

Mitre link : CVE-2025-52448

CVE.ORG link : CVE-2025-52448

JSON object : View

Products Affected

No product.

CWE
CWE-639

Authorization Bypass Through User-Controlled Key