Salesforce vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 202527
3. 20266

Newest CVEs

• CVE-2026-2298

  Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services…

  Salesforce · Marketing Cloud Engagement

  Critical9.4
• CVE-2026-22583

  Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl…

  Salesforce · Marketing Cloud Engagement

  Critical9.8
• CVE-2026-22582

  Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module)…

  Salesforce · Marketing Cloud Engagement

  Critical9.8
• CVE-2026-22586

  Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center,…

  Salesforce · Marketing Cloud Engagement

  Critical9.8
• CVE-2026-22585

  Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center,…

  Salesforce · Marketing Cloud Engagement

  Critical9.8
• CVE-2026-22584

  Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in…

  Salesforce · Uni2TS

  Critical9.8
• CVE-2025-64322

  Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration…

  Salesforce · Agentforce Vibes Extension

  Medium5.3
• CVE-2025-64321

  Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration…

  Salesforce · Agentforce Vibes Extension

  Medium5.3
• CVE-2025-64320

  Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects…

  Salesforce · Agentforce Vibes Extension

  Medium6.5
• CVE-2025-64319

  Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration…

  Salesforce · Mulesoft Anypoint Code Builder

  Medium5.3