CVE-2025-52449
CVSS Score
8.5
EPSS Score
0.0%
EPSS Percentile
0th
Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows Alternative Execution Due to Deceptive Filenames (RCE). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
| CWE | CWE-434 |
| Vendor | salesforce |
| Product | tableau server |
| Ecosystems | |
| Industries | Enterprise |
| Published | Jul 25, 2025 |
| Last Updated | Feb 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for salesforce tableau server
Be the first to know when new high vulnerabilities affecting salesforce tableau server are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Salesforce / Tableau Server
0 < 2025.1.3 0 < 2024.2.12 0 < 2023.3.19