CVE-2025-52449

HIGH 8.5CVE-2025-52449 · Published 25/07/2025 · updated 17/06/2026

In short

CVE-2025-52449 is a HIGH (CVSS 8.5) vulnerability affecting tableau server (tableau).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.2% of all vulnerabilities.
Fix: update to 2024.2.12, 2025.1.3, 2023.3.19 or later.

Package	Affected versions	Patched versions
tableau server tableau	`≥ 2024.2, < 2024.2.12≥ 2025.1, < 2025.1.3< 2023.3.19`	`2024.2.122025.1.32023.3.19`

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows Alternative Execution Due to Deceptive Filenames (RCE). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

References

help.salesforce.com/s/articleView · Vendor Advisory

More vulnerabilities in tableau server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tableau server

tableau

≥ 2024.2, < 2024.2.12≥ 2025.1, < 2025.1.3< 2023.3.19

2024.2.122025.1.32023.3.19

More vulnerabilities in tableau server

See all →