CVE-2025-26495

HIGH 7.5CVE-2025-26495 · Published 11/02/2025 · updated 17/06/2026

In short

CVE-2025-26495 is a HIGH (CVSS 7.5) vulnerability affecting tableau server (tableau).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.1% of all vulnerabilities.
Fix: update to 2020.4.19, 2021.1.16, 2021.2.14, 2021.3.13 or later.

Package	Affected versions	Patched versions
tableau server tableau	`≥ 2020.4, < 2020.4.19≥ 2021.1, < 2021.1.16≥ 2021.2, < 2021.2.14≥ 2021.3, < 2021.3.13≥ 2021.4, < 2021.4.8≥ 2022.1, < 2022.1.3`	`2020.4.192021.1.162021.2.142021.3.132021.4.82022.1.3`

Description

Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token (PAT) into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14, before 2021.1.16, before 2020.4.19.

References

help.salesforce.com/s/articleView · Broken Link

More vulnerabilities in tableau server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tableau server

tableau

≥ 2020.4, < 2020.4.19≥ 2021.1, < 2021.1.16≥ 2021.2, < 2021.2.14≥ 2021.3, < 2021.3.13≥ 2021.4, < 2021.4.8≥ 2022.1, < 2022.1.3

2020.4.192021.1.162021.2.142021.3.132021.4.82022.1.3

More vulnerabilities in tableau server

See all →