« Volver al listado

CVE-2025-26498

Estado: AnalizadaAlta (7.3)—

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

CWE-434 (carga de archivo sin restricciones) en servicio web remoto sin autenticación (AV:N/PR:N/UI:N) permite T1190. El path traversal absoluto permite escribir web shell (T1505.003) o manipular datos en el servidor (T1565.001).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Vulnerability ScanningUser Account ManagementRestrict File and Directory PermissionsPrivileged Account ManagementRemote Data StorageNetwork Segmentation

Tecnologías afectadas (1)

Tableau — Tableau Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-26498",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-26498",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-08-25T20:40:11.651935Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.3,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@salesforce.com",
      "affectedData": [
        {
          "vendor": "Salesforce",
          "modules": [
            "establish-connection-no-undo"
          ],
          "product": "Tableau Server",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2025.1.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2024.2.12",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2023.3.19",
              "versionType": "semver"
            }
          ],
          "platforms": [
            "Windows",
            "Linux"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-08-22T21:15:31.480",
  "references": [
    {
      "url": "https://help.salesforce.com/s/articleView?id=005132575&type=1",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@salesforce.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@salesforce.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19."
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad de carga sin restricciones de archivos con tipo peligroso en Salesforce Tableau Server en Windows y Linux (módulos de establecer conexión y no deshacer) permite Absolute Path Traversal. Este problema afecta a Tableau Server: antes de 2025.1.3, antes de 2024.2.12, antes de 2023.3.19."
    }
  ],
  "lastModified": "2026-06-17T09:01:55.293",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "19541292-4BD4-4BD5-AA68-3836ECC1EBE0",
              "versionEndExcluding": "2023.3.19"
            },
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AC0483E-569A-497C-BB94-D129FACC17D5",
              "versionEndExcluding": "2024.2.12",
              "versionStartIncluding": "2024.2"
            },
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E78711C-389B-4E20-9623-8B0CF6BBCAC8",
              "versionEndExcluding": "2025.1.3",
              "versionStartIncluding": "2025.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@salesforce.com"
}