Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-26495

Sensitive Data Exposure in Tableau Server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Salesforce

Description

Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token (PAT) into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14, before 2021.1.16, before 2020.4.19.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Salesforce Tableau Server

Default version status: unaffected

  • 0 to < 2022.1.3affected
  • 0 to < 2021.4.8affected
  • 0 to < 2021.3.13affected
  • 0 to < 2021.2.14affected
  • 0 to < 2021.1.16affected
  • 0 to < 2020.4.19affected

References