Login Request a demo
SA
Vendor
Salesforce
15 products with CVEs on record
47
CVEs
0
On KEV
0
New 30D
Products
TS
Tableau Server
Salesforce
8.5
14 CVEs0 on KEV0 new
MC
Marketing Cloud Engagement
Salesforce
9.8
5 CVEs0 on KEV0 new
OM
OmniStudio
Salesforce
9.1
5 CVEs0 on KEV0 new
MU
Mule
Salesforce
9.8
4 CVEs0 on KEV0 new
AV
Agentforce Vibes
Salesforce
6.5
3 CVEs0 on KEV0 new
AV
Agentforce Vibes Extension
Salesforce
6.5
3 CVEs0 on KEV0 new
MA
Mulesoft Anypoint Code Builder
Salesforce
6.5
3 CVEs0 on KEV0 new
TO
Tough-cookie
Salesforce
9.8
3 CVEs0 on KEV0 new
DA
Docusign Api Package For Salesforce
Salesforce
8.1
1 CVEs0 on KEV0 new
MS
Mobile Software Development Kit
Salesforce
9.8
1 CVEs0 on KEV0 new
PA
Pardot
Salesforce
4.3
1 CVEs0 on KEV0 new
SC
Salesforce CLI
Salesforce
8.8
1 CVEs0 on KEV0 new
TS
Tableau Server, Tableau Desktop
Salesforce
9.3
1 CVEs0 on KEV0 new
UN
Uni2TS
Salesforce
9.8
1 CVEs0 on KEV0 new
WO
Workbench
Salesforce
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-34951
WO
Workbench
Salesforce
6.1
0%
Apr 6Reflected XSS in footer.php in Workbench Allows Attackers to Hijack Authenticated Sessions
CVE-2026-2298
MC
Marketing Cloud Engagement
Salesforce
9.4
0%
Mar 23Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation
CVE-2026-22583
MC
Marketing Cloud Engagement
Salesforce
9.8
1%
Jan 24Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web…
CVE-2026-22582
MC
Marketing Cloud Engagement
Salesforce
9.8
1%
Jan 24Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module) allows Web Services…
CVE-2026-22586
MC
Marketing Cloud Engagement
Salesforce
9.8
1%
Jan 24Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As…
CVE-2026-22585
MC
Marketing Cloud Engagement
Salesforce
9.8
0%
Jan 24Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center,…
CVE-2026-22584
UN
Uni2TS
Salesforce
9.8
0%
Jan 9Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This…
CVE-2025-64322
AV
Agentforce Vibes Extension
Salesforce
5.3
0%
Nov 4Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects…
CVE-2025-64321
AV
Agentforce Vibes Extension
Salesforce
5.3
0%
Nov 4Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects…
CVE-2025-64320
AV
Agentforce Vibes Extension
Salesforce
6.5
0%
Nov 4Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension:…
CVE-2025-64319
MA
Mulesoft Anypoint Code Builder
Salesforce
5.3
0%
Nov 4Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue…
CVE-2025-64318
MA
Mulesoft Anypoint Code Builder
Salesforce
5.3
0%
Nov 4Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue…
CVE-2025-10875
MA
Mulesoft Anypoint Code Builder
Salesforce
6.5
0%
Nov 4Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.This issue affects Mulesoft Anypoint Code…
CVE-2025-9844
SC
Salesforce CLI
Salesforce
8.8
0%
Sep 23Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6
CVE-2025-52451
TS
Tableau Server
Salesforce
8.5
0%
Aug 22Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) allows Absolute Path…
CVE-2025-52450
TS
Tableau Server
Salesforce
6.5
0%
Aug 22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc api -…
CVE-2025-26498
TS
Tableau Server
Salesforce
7.3
0%
Aug 22Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows Absolute Path…
CVE-2025-26497
TS
Tableau Server
Salesforce
7.3
0%
Aug 22Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue…
CVE-2025-26496
TS
Tableau Server, Tableau Desktop
Salesforce
9.3
0%
Aug 22Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File Upload modules) allows Local Code…
CVE-2025-52455
TS
Tableau Server
Salesforce
5.3
0%
Jul 25Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofing
CVE-2025-52454
TS
Tableau Server
Salesforce
8.2
0%
Jul 25Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector modules) allows Resource Location Spoofing
CVE-2025-52453
TS
Tableau Server
Salesforce
8.2
0%
Jul 25Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing
CVE-2025-52452
TS
Tableau Server
Salesforce
8.5
0%
Jul 25Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source…
CVE-2025-52449
TS
Tableau Server
Salesforce
8.5
0%
Jul 25Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows Alternative Execution Due…
CVE-2025-52448
TS
Tableau Server
Salesforce
8.1
0%
Jul 25Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-initial-sql api modules) allows Interface Manipulation…
CVE-2025-52447
TS
Tableau Server
Salesforce
8.1
0%
Jul 25Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (set-initial-sql tabdoc command modules) allows Interface…
CVE-2025-52446
TS
Tableau Server
Salesforce
8.0
0%
Jul 25Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface Manipulation (data access to…
CVE-2025-43699
OM
OmniStudio
Salesforce
5.3
0%
Jun 10Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission check.  This impacts OmniStudio: before…
CVE-2025-43698
OM
OmniStudio
Salesforce
9.1
0%
Jun 10Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects
CVE-2025-43697
OM
OmniStudio
Salesforce
7.5
0%
Jun 10Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data
CVE-2025-43701
OM
OmniStudio
Salesforce
7.5
0%
Jun 10Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data.  This impacts OmniStudio: before version 254
CVE-2025-43700
OM
OmniStudio
Salesforce
7.5
0%
Jun 10Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of encrypted data.  This impacts OmniStudio: before Spring 2025
CVE-2025-26495
TS
Tableau Server
Salesforce
7.5
0%
Feb 11Sensitive Data Exposure in Tableau Server
CVE-2025-26494
TS
Tableau Server
Salesforce
7.7
1%
Feb 11Server Side Request Forgery vulnerability in Tableau Server
CVE-2024-39344
DA
Docusign Api Package For Salesforce
Salesforce
8.1
0%
Aug 21An issue was discovered in the Docusign API package 8.142.14 for Salesforce
CVE-2024-32148
PA
Pardot
Salesforce
4.3
0%
Jun 11WordPress Pardot plugin <= 2.1.0 - Broken Access Control vulnerability
CVE-2023-26136
TO
Tough-cookie
Salesforce
9.8
3%
Jul 1Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode
CVE-2016-15012
MS
Mobile Software Development Kit
Salesforce
9.8
1%
Jan 7** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in forcedotcom SalesforceMobileSDK-Windows up to 4.x
CVE-2021-1630
MU
Mule
Salesforce
7.5
1%
Aug 5XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private…
CVE-2021-1628
MU
Mule
Salesforce
9.8
1%
Mar 26MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers
CVE-2021-1627
MU
Mule
Salesforce
9.8
1%
Mar 26MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers
CVE-2021-1626
MU
Mule
Salesforce
9.8
2%
Mar 26MuleSoft is aware of a Remote Code Execution vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers
CVE-2016-1000232
TO
Tough-cookie
Salesforce
5.3
2%
Sep 5NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service
CVE-2017-15010
TO
Tough-cookie
Salesforce
7.5
3%
Oct 4A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js