Lucene search
+L

112 matches found

OSV
OSV
•added 2025/07/25 7:15 p.m.•14 views

CVE-2025-52447

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux set-initial-sql tabdoc command modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12,...

8.1CVSS5.8AI score0.00363EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/25 7:15 p.m.•16 views

CVE-2025-52446

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux tab-doc api modules allows Interface Manipulation data access to the production database cluster.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

8CVSS0.00238EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/25 7:15 p.m.•16 views

CVE-2025-52448

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux validate-initial-sql api modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before...

8.1CVSS0.00355EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/25 6:53 p.m.•9 views

CVE-2025-52448

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux validate-initial-sql api modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before...

7.1AI score0.00355EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/25 6:53 p.m.•38 views

CVE-2025-52448

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux validate-initial-sql api modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before...

0.00355EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/25 6:53 p.m.•67 views

CVE-2025-52448

Salesforce Tableau Server is vulnerable to an authorization bypass via a user-controlled key within the validate-initial-sql API modules. This vulnerability allows an attacker to perform interface manipulation , potentially gaining unauthorized access to the production database cluster. The issue...

8.1CVSS6.5AI score0.00355EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/25 6:50 p.m.•8 views

CVE-2025-52447

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux set-initial-sql tabdoc command modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12,...

7.2AI score0.00363EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/25 6:50 p.m.•22 views

CVE-2025-52447

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux set-initial-sql tabdoc command modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12,...

0.00363EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/25 6:50 p.m.•62 views

CVE-2025-52447

The Salesforce Tableau Server (Windows, Linux) is affected by an Authorization Bypass Through User-Controlled Key vulnerability (CWE-639) in the set-initial-sql tabdoc command modules. This flaw allows an attacker, operating remotely, to bypass authentication and gain unauthorized access to prote...

8.1CVSS6.7AI score0.00363EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2025/07/25 6:43 p.m.•83 views

CVE-2025-52446

A vulnerability in the tab-doc api modules of Salesforce Tableau Server on Windows and Linux allows an authorization bypass via a user-controlled key. This flaw enables interface manipulation , potentially granting unauthorized access to the production database cluster. This issue impacts Tableau...

8CVSS6.6AI score0.00238EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/25 6:43 p.m.•9 views

CVE-2025-52446

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux tab-doc api modules allows Interface Manipulation data access to the production database cluster.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

6.5AI score0.00238EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/25 6:43 p.m.•37 views

CVE-2025-52446

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux tab-doc api modules allows Interface Manipulation data access to the production database cluster.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

0.00238EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•3 views

CVE-2025-52446: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux tab-doc api modules allows Interface Manipulation data access to the production database cluster.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

8CVSS5.9AI score0.00238EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•4 views

CVE-2025-52448: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux validate-initial-sql api modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before...

8.1CVSS5.9AI score0.00355EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•2 views

CVE-2025-52447: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux set-initial-sql tabdoc command modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12,...

8.1CVSS5.9AI score0.00363EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/28 12:00 a.m.•30 views

CVE-2024-58129

In MISP before 2.4.193, menucustomrightlinkhtml parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks against every page...

5.5CVSS0.00222EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/03/22 1:59 p.m.•35 views

CVE-2025-2311

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event...

9CVSS5.4AI score0.0017EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/03/20 12:15 p.m.•14 views

CVE-2025-2311

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event...

9CVSS5.4AI score0.0017EPSS
SaveExploits0References3
NVD
NVD
•added 2025/03/20 12:15 p.m.•22 views

CVE-2025-2311

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event...

9CVSS0.0017EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/20 11:55 a.m.•18 views

CVE-2025-2311 Authentication Bypass in Sechard Information Technologies' SecHard

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event...

9CVSS5.4AI score0.0017EPSS
SaveExploits0References2
Rows per page
Query Builder