Skip to content
OpenAdvisories
Critical 1 exploited CVE SSA-246355 5 CVEs

SSA-246355: Multiple Vulnerabilities in Tableau Server Component of Opcenter Intelligence

Published Feb 11, 2025 · Updated Feb 14, 2025 · Revision 2

Vendor: Siemens Product: Opcenter Intelligence

Summary

The Tableau Server component in Opcenter Intelligence contains multiple vulnerabilities as described below.

Siemens has released a new version for Opcenter Intelligence and recommends to update to the latest version and to install the latest available version of Tableau Server as described in
https://support.sw.siemens.com/knowledge-base/PL8822108.

Vulnerabilities 5

  • Critical 10.0
    CVE-2023-46604 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

    The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class …

    Apache Software Foundation Apache ActiveMQ Apache ActiveMQ Legacy OpenWire Module activemq Debian Ubuntu Maven
    KEV Nov 2, 2023
  • Critical 9.8
    CVE-2022-22128

    Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfe…

  • High 7.7
    CVE-2025-26494

    Server Side Request Forgery vulnerability in Tableau Server

    Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5.

    Salesforce Tableau Server
  • High 7.5
    CVE-2025-26495

    Sensitive Data Exposure in Tableau Server

    Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token (PAT) into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14,…

    Salesforce Tableau Server
  • Unscored —
    CVE-2022-22127

    Tableau is aware of a broken access control vulnerability present in Tableau Server affecting Tableau Server customers …

Revision history

  1. #2

    Replaced Siemens assigned CVEs CVE-2025-26490 and CVE-2025-26491 with Salesforce assigned CVEs CVE-2025-26494 and CVE-2025-26495

  2. #1

    Publication date

References