PT-2025-30928 · Tableau · Tableau Server
CVE-2025-52455
·
Published
2025-06-26
·
Updated
2025-10-29
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Tableau Server versions prior to 2025.1.3
Tableau Server versions prior to 2024.2.12
Tableau Server versions prior to 2023.3.19
Description
Tableau Server is susceptible to a Server-Side Request Forgery (SSRF) issue within the EPS Server modules on Windows and Linux systems. This flaw enables Resource Location Spoofing.
Recommendations
Update Tableau Server to version 2025.1.3 or later.
Update Tableau Server to version 2024.2.12 or later.
Update Tableau Server to version 2023.3.19 or later.
Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tableau Server