VYPR
← All vendors
Vendor

Tableausoftware

Products
2
CVEs
22
Across products
22
Status
Private

Products

2

Recent CVEs

22
View all 22 CVEs →
  • CVE-2019-19719Dec 11, 2019
    Tableausoftware
    Tableau Server
    risk 0.05cvss —epss 0.22

    Tableau Server 10.3 through 2019.4 on Windows and Linux allows XSS via the embeddedAuthRedirect page.

  • CVE-2019-15637Aug 26, 2019
    Schneider Electric
    Tableau Desktop
    risk 0.05cvss —epss 0.14

    Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop.

  • CVE-2014-1204Jan 31, 2014
    Tableausoftware
    Tableau Server
    risk 0.03cvss —epss 0.04

    SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be exploited by unauthenticated remote attackers if the guest user is enabled.

  • CVE-2025-52451Aug 22, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

  • CVE-2025-52450Aug 22, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before…

  • CVE-2025-26498Aug 22, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

  • CVE-2025-26497Aug 22, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

  • CVE-2025-26496Aug 22, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File Upload modules) allows Local Code Inclusion.This issue affects Tableau Server, Tableau Desktop: before 2025.1.3, before 2024.2.12,…

  • CVE-2025-52455Jul 25, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

  • CVE-2025-52454Jul 25, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

  • CVE-2025-52453Jul 25, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

  • CVE-2025-52452Jul 25, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source modules) allows Absolute Path Traversal. This issue affects Tableau Server: before 2025.1.3, before…

  • CVE-2025-52449Jul 25, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows Alternative Execution Due to Deceptive Filenames (RCE). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12,…

  • CVE-2025-52448Jul 25, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-initial-sql api modules) allows Interface Manipulation (data access to the production database cluster). This issue affects Tableau Server: before 2025.1.3,…

  • CVE-2025-52447Jul 25, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (set-initial-sql tabdoc command modules) allows Interface Manipulation (data access to the production database cluster). This issue affects Tableau Server: before…

  • CVE-2025-52446Jul 25, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface Manipulation (data access to the production database cluster).This issue affects Tableau Server: before 2025.1.3, before…

  • CVE-2025-26495Feb 11, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.00

    Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token (PAT) into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14, before 2021.1.16,…

  • CVE-2025-26494Feb 11, 2025
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.01

    Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5.

  • CVE-2022-22127May 25, 2022
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.01

    Tableau is aware of a broken access control vulnerability present in Tableau Server affecting Tableau Server customers using Local Identity Store for managing users. The vulnerability allows a malicious site administrator to change passwords for users in different sites hosted…

  • CVE-2021-1629Mar 26, 2021
    Tableausoftware
    Tableau Server
    risk 0.00cvss —epss 0.01

    Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users.

View all 22 CVEs →