CVE-2025-26491 in Opcenter Intelligence
Summary
by MITRE • 02/11/2025
A vulnerability has been identified in Opcenter Intelligence (All versions < V2501). Server-side request forgery (SSRF) vulnerability in Tableau Server. For details go to help.salesforce.com and search for knowledge article id 001534936.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 07/05/2026
The vulnerability under discussion affects Opcenter Intelligence software version 2501 and earlier, specifically within the Tableau Server component that handles server-side requests. This represents a critical security flaw that allows malicious actors to manipulate the system's behavior by forcing it to make unintended requests to internal or external resources. The issue manifests as a server-side request forgery vulnerability which enables attackers to bypass normal access controls and potentially gain unauthorized access to backend systems that should otherwise remain isolated from direct network exposure.
This type of vulnerability falls under the common weakness enumeration category CWE-918, specifically addressing server-side request forgery conditions where applications fail to properly validate or sanitize user-supplied input that influences HTTP requests. The ATT&CK framework categorizes this under T1566.002 for server-side request forgery and potentially T1071.004 for application layer protocol usage. The flaw occurs when the system processes user-provided URLs or resource identifiers without adequate validation, allowing an attacker to specify targets that should not be accessible through normal operational procedures.
The operational impact of this vulnerability extends beyond simple data exposure as it creates potential pathways for attackers to access internal network resources that are typically protected by firewalls and other security controls. An attacker could leverage this weakness to probe internal systems, access sensitive databases, or even escalate privileges within the server environment. The vulnerability particularly affects organizations using Tableau Server for business intelligence and data visualization, where the system may have access to various internal services that should remain isolated from external threats.
Organizations should immediately implement mitigations including input validation controls that sanitize all user-supplied URLs and resource identifiers before processing them. Network segmentation and firewall rules should be reviewed to limit unnecessary access between the Tableau Server and internal systems. Regular security updates and patches should be applied as soon as vendor releases are available. Additionally, monitoring solutions should be enhanced to detect unusual patterns of outbound requests that might indicate exploitation attempts. The knowledge article referenced in the vulnerability description from Salesforce provides specific guidance on implementing these protective measures and understanding the full scope of potential impacts within the affected software ecosystem.
The vulnerability represents a significant risk to enterprise data security and requires immediate attention from security teams responsible for protecting business intelligence platforms. Organizations relying on Tableau Server implementations must conduct thorough assessments of their current configurations and implement comprehensive security controls to prevent exploitation of this server-side request forgery weakness that could lead to unauthorized access to sensitive corporate data and internal network resources.