CVE Feed

    Dashboard / CVE / CVE-2022-22128

    CVE-2022-22128

    Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer service that could allow remote code execution.Tableau only supports product versions for 24 months after release. Older versions have reached their End of Life and are no longer supported. They are also not assessed for potential security issues and do not receive security updates.

    Published:Oct 17, 2022
    Last Modified:May 13, 2025
    EPS:Oct 17, 2022
    EPSS Score:0.03606
    CVSS Score:9.8

    Affected Products

    Vendor
    Tableau
    Product
    Tableau Server

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-52451 (CVSS 8.5) — Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-da…
    CVE-2025-52450 (CVSS 6.5) — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tab…
    CVE-2025-26498 (CVSS 7.3) — Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (…
    CVE-2025-26497 (CVSS 7.3) — Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (…
    CVE-2025-26496 (CVSS 9.3) — Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tabl…
    CVE-2025-52455 (CVSS 5.3) — Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server mo…
    CVE-2025-52454 (CVSS 8.2) — Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Con…
    CVE-2025-52453 (CVSS 8.2) — Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Sou…
    CVE-2025-52452 (CVSS 8.5) — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tab…
    CVE-2025-52449 (CVSS 8.5) — Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High