Read the docs

Salesforce

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

Salesforce records in CISA KEV

No Salesforce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Marketing Cloud Engagement 4 records MEDIUM Mule 4 records MEDIUM Agentforce Vibes 3 records LOW Mulesoft Anypoint Code Builder 3 records LOW Tough-cookie 3 records HIGH Mobile Software Development Kit 1 record MEDIUM Uni2ts 1 record MEDIUM Workbench 1 record LOW

Records

3 records in Agentforce Vibes · all components

TI-2025-39755 CVE-2025-64320 · GHSA-x649-8g7w-vfq7

Code injection in Salesforce Agentforce Vibes Extension

Priority LOW 36

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00216 Published 2025-11-04 Fixed in 3.2.0 CWE-1427
TI-2025-39756 CVE-2025-64321 · GHSA-x7cq-fpc4-629v

Code injection in Salesforce Agentforce Vibes Extension

Priority LOW 30

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00236 Published 2025-11-04 Fixed in 3.3.0 CWE-1427
TI-2025-39757 CVE-2025-64322 · GHSA-4hrg-69hg-xq77

Incorrect permission assignment in Salesforce Agentforce Vibes Extension

Priority LOW 23

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00224 Published 2025-11-04 Fixed in 3.3.0 CWE-732
Open these records in search →