CVE Intelligence

Salesforce Marketing Cloud Engagement vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Salesforce Marketing Cloud Engagement: 5 record(s), with affected versions and fixes.
cpe:2.3:a:salesforce:marketing_cloud_engagement

CVE-2026-2298 Critical · 9.4 CWE-88 Mar 23, 2026
Argument Injection in Salesforce Marketing Cloud Engagement
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026.
CVE-2026-22586 Critical · 9.8 CWE-321 Jan 23, 2026
Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement…
Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.
CVE-2026-22585 Critical · 9.8 CWE-327 Jan 23, 2026
Use of a Broken or Risky Cryptographic Algorithm in Salesforce Marketing Cloud Engagement
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.
CVE-2026-22583 Critical · 9.8 CWE-88 Jan 23, 2026
Argument Injection in Salesforce Marketing Cloud Engagement
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.
CVE-2026-22582 Critical · 9.8 CWE-88 Jan 23, 2026
Argument Injection in Salesforce Marketing Cloud Engagement
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.