Description
Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-initial-sql api modules) allows Interface Manipulation (data access to the production database cluster). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Salesforce | Tableau Server | < 2025.1.3, < 2024.2.12, < 2023.3.19 | 2025.1.3 |
Advisories 2
- WID-SEC-2026-0411 Tableau Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 12, 2026
- NCSC-2025-0236 Kwetsbaarheden verholpen in Salesforce Tableau Server NCSC-NL (Netherlands) · Jul 28, 2025