Skip to content

Salesforce vulnerabilities

Products

Newest

salesforce workbench, forceworkbench +1 more Reflected XSS in footer.php in Workbench Allows Attackers to Hijack Authenticated Sessions CVE-2026-34951 5.1 MediumApril 6, 2026
salesforce marketing cloud engagement Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability... CVE-2026-2298 9.4 CriticalMarch 23, 2026
salesforce marketing cloud engagement Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability... CVE-2026-22583 9.8 CriticalJanuary 24, 2026
salesforce marketing cloud engagement Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability... CVE-2026-22582 9.8 CriticalJanuary 24, 2026
salesforce marketing cloud engagement Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages,... CVE-2026-22586 9.8 CriticalJanuary 24, 2026
salesforce marketing cloud engagement Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud... CVE-2026-22585 9.8 CriticalJanuary 24, 2026
salesforce uni2ts Salesforce Uni2TS has a Code Injection vulnerability CVE-2026-22584 Fix available 9.8 CriticalJanuary 9, 2026
salesforce agentforce vibes extension, agentforce vibes +1 more Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce... CVE-2025-64322 5.3 MediumNovember 4, 2025
salesforce agentforce vibes extension, agentforce vibes +1 more Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce... CVE-2025-64321 5.3 MediumNovember 4, 2025
salesforce agentforce vibes extension, agentforce vibes +1 more Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce... CVE-2025-64320 6.5 MediumNovember 4, 2025
salesforce mulesoft anypoint code builder Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft... CVE-2025-64319 5.3 MediumNovember 4, 2025
salesforce mulesoft anypoint code builder Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft... CVE-2025-64318 5.3 MediumNovember 4, 2025
salesforce mulesoft anypoint code builder Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft... CVE-2025-10875 6.5 MediumNovember 4, 2025
salesforce cli Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows... CVE-2025-9844 8.8 HighSeptember 23, 2025
salesforce tableau server, tableau server +1 more Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc... CVE-2025-52451 8.5 HighAugust 22, 2025
salesforce tableau server, tableau server +1 more Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... CVE-2025-52450 6.5 MediumAugust 22, 2025
salesforce tableau server, tableau server +1 more Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on... CVE-2025-26498 7.3 HighAugust 22, 2025
salesforce tableau server, tableau server +1 more Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on... CVE-2025-26497 7.3 HighAugust 22, 2025
salesforce tableau server, tableau desktop, tableau server +1 more Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau... CVE-2025-26496 9.3 CriticalAugust 22, 2025
salesforce tableau server, tableau server +1 more Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux ... CVE-2025-52455 5.3 MediumJuly 25, 2025
salesforce tableau server, tableau server +1 more Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux ... CVE-2025-52454 8.2 HighJuly 25, 2025
salesforce tableau server, tableau server +1 more Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux ... CVE-2025-52453 8.2 HighJuly 25, 2025
salesforce tableau server, tableau server +1 more Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... CVE-2025-52452 8.5 HighJuly 25, 2025
salesforce tableau server, tableau server +1 more Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on... CVE-2025-52449 8.5 HighJuly 25, 2025
salesforce tableau server, tableau server +1 more Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on... CVE-2025-52448 8.1 HighJuly 25, 2025
salesforce tableau server, tableau server +1 more Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on... CVE-2025-52447 8.1 HighJuly 25, 2025
salesforce tableau server, tableau server +1 more Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on... CVE-2025-52446 8.0 HighJuly 25, 2025
salesforce omnistudio Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows... CVE-2025-43699 5.3 MediumJune 10, 2025
salesforce omnistudio Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows... CVE-2025-43698 9.1 CriticalJune 10, 2025
salesforce omnistudio Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows... CVE-2025-43697 7.5 HighJune 10, 2025
salesforce omnistudio Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows... CVE-2025-43701 7.5 HighJune 10, 2025
salesforce omnistudio Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows... CVE-2025-43700 7.5 HighJune 10, 2025
salesforce tableau server, tableau server +1 more Sensitive Data Exposure in Tableau Server CVE-2025-26495 7.5 HighFebruary 11, 2025
salesforce tableau server, tableau server +1 more Server Side Request Forgery vulnerability in Tableau Server CVE-2025-26494 7.7 HighFebruary 11, 2025
salesforce docusign api package for salesforce An issue was discovered in the Docusign API package 8.142.14 for Salesforce. The... CVE-2024-39344 8.1 HighAugust 21, 2024
salesforce pardot WordPress Pardot plugin <= 2.1.0 - Broken Access Control vulnerability CVE-2024-32148 4.3 MediumJune 11, 2024
salesforce tough-cookie tough-cookie Prototype Pollution vulnerability CVE-2023-26136 Public exploitFix available 6.5 MediumJuly 1, 2023
forcedotcom salesforcemobilesdk-windows, salesforce mobile software development kit +1 more forcedotcom SalesforceMobileSDK-Windows QuerySpec.cs ComputeCountSql sql injection CVE-2016-15012 5.5 MediumJanuary 7, 2023
salesforce tableau server, tableau server +1 more Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s... CVE-2022-22128 9.8 CriticalOctober 17, 2022
salesforce tableau server, tableau server +1 more Tableau is aware of a broken access control vulnerability present in Tableau Server affecting... CVE-2022-22127 7.2 HighMay 25, 2022
salesforce mule, salesforce, inc. mulesoft +1 more XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component... CVE-2021-1630 7.5 HighAugust 5, 2021
salesforce mule, salesforce, inc. mulesoft +1 more MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a... CVE-2021-1628 9.8 CriticalMarch 26, 2021
salesforce mule, salesforce, inc. mulesoft +1 more MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a... CVE-2021-1627 9.8 CriticalMarch 26, 2021
salesforce mule, salesforce, inc. mulesoft +1 more MuleSoft is aware of a Remote Code Execution vulnerability affecting certain versions of a Mule... CVE-2021-1626 9.8 CriticalMarch 26, 2021
salesforce tableau server, tableau server +1 more Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used... CVE-2020-6939 9.8 CriticalNovember 23, 2020
salesforce tough-cookie, ibm api connect, redhat openshift container platform +2 more ReDoS via long string of semicolons in tough-cookie CVE-2016-1000232 Fix available 5.3 MediumSeptember 5, 2018
salesforce tough-cookie Regular Expression Denial of Service in tough-cookie CVE-2017-15010 Fix available 7.5 HighOctober 3, 2017