CVE Intelligence

Vulnerabilidades do Salesforce Marketing Cloud Engagement

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Salesforce Marketing Cloud Engagement: 5 registro(s), com versões afetadas e correções.
cpe:2.3:a:salesforce:marketing_cloud_engagement

CVE-2026-2298 Crítica · 9.4 CWE-88 23/03/2026
Argument Injection em Salesforce Marketing Cloud Engagement
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026.
CVE-2026-22586 Crítica · 9.8 CWE-321 23/01/2026
Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement…
Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.
CVE-2026-22585 Crítica · 9.8 CWE-327 23/01/2026
Use of a Broken or Risky Cryptographic Algorithm em Salesforce Marketing Cloud Engagement
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.
CVE-2026-22583 Crítica · 9.8 CWE-88 23/01/2026
Argument Injection em Salesforce Marketing Cloud Engagement
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.
CVE-2026-22582 Crítica · 9.8 CWE-88 23/01/2026
Argument Injection em Salesforce Marketing Cloud Engagement
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.