CVE-2025-52455: SSRF
Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52455?
CVE-2025-52455 is classified as a Server-Side Request Forgery (SSRF) vulnerability, which can lead to resource location spoofing.
How do I fix CVE-2025-52455?
To mitigate CVE-2025-52455, upgrade Salesforce Tableau Server to versions 2025.1.3 or later, 2024.2.12 or later, or 2023.3.19 or later.
Which versions of Salesforce Tableau Server are affected by CVE-2025-52455?
CVE-2025-52455 affects versions of Salesforce Tableau Server before 2025.1.3, before 2024.2.12, and before 2023.3.19.
What kind of attack does CVE-2025-52455 enable?
CVE-2025-52455 enables Server-Side Request Forgery (SSRF), allowing attackers to spoof resource locations.
Who is the vendor for CVE-2025-52455?
The vendor for CVE-2025-52455 is Salesforce, specifically affecting the Tableau Server product.