CVE-2025-26497 - Vulnerability Details - OpenCVE

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00049.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Linux	Linux
Microsoft	Windows
Salesforce	Tableau Server

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Linux	Linux
Microsoft	Windows
Salesforce	Tableau Server

References

Link	Providers
https://help.salesforce.com/s/articleView?id=005132575&type=1

History

Mon, 25 Aug 2025 21:45:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sat, 23 Aug 2025 11:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Microsoft Microsoft windows Salesforce Salesforce tableau Server
Vendors & Products		Linux Linux linux Microsoft Microsoft windows Salesforce Salesforce tableau Server

Fri, 22 Aug 2025 20:30:00 +0000

Type	Values Removed	Values Added
Description		Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Weaknesses		CWE-434
References		https://help.salesforce.com/s/articleView?id=005132575&type=1

MITRE

Status: PUBLISHED

Assigner: Salesforce

Published: 2025-08-22T20:13:13.441Z

Updated: 2025-08-25T20:41:21.628Z

Reserved: 2025-02-11T17:18:13.649Z

Link: CVE-2025-26497

Vulnrichment

Updated: 2025-08-25T20:41:15.697Z

NVD

Status : Awaiting Analysis

Published: 2025-08-22T21:15:31.330

Modified: 2025-08-25T21:15:36.773

Link: CVE-2025-26497

Redhat

No data.

OpenCVE Enrichment

Updated: 2025-08-23T10:55:05Z

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-26497", "assignerOrgId": "c9b25dee-ae6d-4083-ba23-638c500cc364", "state": "PUBLISHED", "assignerShortName": "Salesforce", "dateReserved": "2025-02-11T17:18:13.649Z", "datePublished": "2025-08-22T20:13:13.441Z", "dateUpdated": "2025-08-25T20:41:21.628Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["Flow Editor"], "platforms": ["Windows", "Linux"], "product": "Tableau Server", "vendor": "Salesforce", "versions": [{"lessThan": "2025.1.3", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "2024.2.12", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "2023.3.19", "status": "affected", "version": "0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.<p>This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.</p>"}], "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19."}], "impacts": [{"capecId": "CAPEC-597", "descriptions": [{"lang": "en", "value": "CAPEC-597 Absolute Path Traversal"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-434", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "c9b25dee-ae6d-4083-ba23-638c500cc364", "shortName": "Salesforce", "dateUpdated": "2025-08-22T20:13:13.441Z"}, "references": [{"url": "https://help.salesforce.com/s/articleView?id=005132575&type=1"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-08-25T20:41:04.140446Z", "id": "CVE-2025-26497", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-25T20:41:21.628Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-26497", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-08-25T20:41:04.140446Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-25T20:41:15.697Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-597", "descriptions": [{"lang": "en", "value": "CAPEC-597 Absolute Path Traversal"}]}], "affected": [{"vendor": "Salesforce", "modules": ["Flow Editor"], "product": "Tableau Server", "versions": [{"status": "affected", "version": "0", "lessThan": "2025.1.3", "versionType": "semver"}, {"status": "affected", "version": "0", "lessThan": "2024.2.12", "versionType": "semver"}, {"status": "affected", "version": "0", "lessThan": "2023.3.19", "versionType": "semver"}], "platforms": ["Windows", "Linux"], "defaultStatus": "unaffected"}], "references": [{"url": "https://help.salesforce.com/s/articleView?id=005132575&type=1"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.", "supportingMedia": [{"type": "text/html", "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.<p>This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "providerMetadata": {"orgId": "c9b25dee-ae6d-4083-ba23-638c500cc364", "shortName": "Salesforce", "dateUpdated": "2025-08-22T20:13:13.441Z"}}}, "cveMetadata": {"cveId": "CVE-2025-26497", "state": "PUBLISHED", "dateUpdated": "2025-08-25T20:41:21.628Z", "dateReserved": "2025-02-11T17:18:13.649Z", "assignerOrgId": "c9b25dee-ae6d-4083-ba23-638c500cc364", "datePublished": "2025-08-22T20:13:13.441Z", "assignerShortName": "Salesforce"}, "dataVersion": "5.1"}