CVE-2020-6939

Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account takeover for users of that site. Tableau Server versions...

CVE-2020-6938

A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26, 2020, could allow access to sensitive information in log files...

CVE-2019-19719

Tableau Server 10.3 through 2019.4 on Windows and Linux allows XSS via the embeddedAuthRedirect page...

CVE-2025-26495

Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token PAT into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14, before 2021.1.16, before 2020.4.19...

CVE-2025-26494

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5...

CVE-2025-26494

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5...

CVE-2025-26495

Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token PAT into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14, before 2021.1.16, before 2020.4.19...

CVE-2025-26494

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5...

CVE-2025-26495

Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token PAT into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14, before 2021.1.16, before 2020.4.19...

CVE-2025-26495 Sensitive Data Exposure in Tableau Server

Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token PAT into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14, before 2021.1.16, before 2020.4.19...

CVE-2025-26495

CVE-2025-26495 affects Salesforce Tableau Server. The issue is Cleartext Storage of Sensitive Information: Personal Access Tokens (PAT) can be recorded in logging repositories. Affected Tableau Server versions include pre-2022.1.3, pre-2021.4.8, pre-2021.3.13, pre-2021.2.14, pre-2021.1.16, and pr...

CVE-2025-26495 Sensitive Data Exposure in Tableau Server

Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token PAT into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14, before 2021.1.16, before 2020.4.19...

CVE-2025-26494

CVE-2025-26494 is a Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server that enables authentication bypass on Tableau Server versions 2023.3 through 2023.3.5. The connected sources corroborate the SSRF and the affected range; Red Hat and PT-Security entries provide concr...

CVE-2025-26494 Server Side Request Forgery vulnerability in Tableau Server

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5...

CVE-2025-26494 Server Side Request Forgery vulnerability in Tableau Server

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5...

CVE-2025-26490

Rejected reason: This CVE ID is a duplicate of CVE-2025-26495...

CVE-2025-26491

Rejected reason: This CVE ID is a duplicate of CVE-2025-26494...

CVE-2025-26491

...

CVE-2025-26491

...

CVE-2025-26490

CVE-2025-26490 is a duplicate of CVE-2025-26495. The connected records describe a vulnerability in Salesforce Tableau Server involving cleartext storage of Personal Access Tokens (PAT) in logging repositories. Affected products/versions: Tableau Server before 2022.1.3, and before 2021.4.8, 2021.3...