Summary
The Tableau Server component in Opcenter Intelligence contains multiple vulnerabilities as described below.
Siemens has released a new version for Opcenter Intelligence and recommends to update to the latest version and to install the latest available version of Tableau Server as described in
https://support.sw.siemens.com/knowledge-base/PL8822108.
Vulnerabilities 5
-
Critical 10.0
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class …
KEV Nov 2, 2023 -
Critical 9.8
Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfe…
-
Unscored —
Tableau is aware of a broken access control vulnerability present in Tableau Server affecting Tableau Server customers …
-
Unscored —CVE-2025-26490 Rejected
This CVE ID is a duplicate of CVE-2025-26495.
-
Unscored —CVE-2025-26491 Rejected
This CVE ID is a duplicate of CVE-2025-26494.
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication date
References
-
SSA-246355: Multiple Vulnerabilities in Tableau Server Component of Opcenter Intelligence - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-246355.html
-
ICS Advisory ICSA-25-044-14 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-14
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B