CVE-2025-26490

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Feb 11, 2025
CWE ID 532

Summary

CVE-2025-26490 is a newly identified vulnerability affecting Opcenter Intelligence versions below V2501. This issue involves a personal access token disclosure vulnerability in Tableau Server, which could potentially expose sensitive information. Users are urged to refer to Salesforce Help (knowledge article id 000390611) for more details and guidelines on mitigating this risk. Unsecured access to these tokens could potentially allow attackers to access and manipulate data, posing a significant security concern. It is recommended that users prioritize updating their Opcenter Intelligence software to a secure version as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share