Vendor

Salesforce

35 known vulnerabilities.

Products

Tableau Server 14 OmniStudio 5 Marketing Cloud Engagement 5 Agentforce Vibes Extension 3 Mulesoft Anypoint Code Builder 3 Tableau Server, Tableau Desktop 1 Mulesoft 1 Mulesoft API Gateway 1 Uni2TS 1 Salesforce CLI 1 Pardot 1

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

Critical 9.4

CVE-2026-2298

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketin…

Salesforce Marketing Cloud Engagement

Mar 23, 2026
Critical 9.8

CVE-2026-22583

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketin…

Salesforce Marketing Cloud Engagement

Jan 24, 2026
Critical 9.8

CVE-2026-22582

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketin…

Salesforce Marketing Cloud Engagement

Jan 24, 2026
Critical 9.8

CVE-2026-22586

Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, P…

Salesforce Marketing Cloud Engagement

Jan 24, 2026
Critical 9.8

CVE-2026-22585

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Fo…

Salesforce Marketing Cloud Engagement

Jan 24, 2026
Critical 9.8

CVE-2026-22584

Salesforce Uni2TS has a Code Injection vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0.

Salesforce Uni2TS uni2ts PyPI

Jan 9, 2026
Critical 9.3

CVE-2025-26496

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Deskt…

Salesforce Tableau Server, Tableau Desktop

Aug 22, 2025
Critical 9.1

CVE-2025-43698

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level se…

Salesforce OmniStudio

Jun 10, 2025