High severity7.7NVD Advisory· Published Feb 11, 2025· Updated Jun 17, 2026

CVE-2025-26494

Description

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5.

Affected products

Tableausoftware/Server
cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*
Range: >=2023.3,<=2023.3.5
Salesforce/Tableau Serverllm-fuzzy2 versions
2023.3 - 2023.3.5+ 1 more
- (no CPE)range: 2023.3 - 2023.3.5
- (no CPE)range: 2023.3

Patches

Vulnerability mechanics

References

help.salesforce.com/s/articleViewnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.501
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000