Salesforce

Records44All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

Salesforce records in CISA KEV

No Salesforce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Marketing Cloud Engagement 4 records MEDIUM Mule 4 records MEDIUM Agentforce Vibes 3 records LOW Mulesoft Anypoint Code Builder 3 records LOW Tough-cookie 3 records HIGH Mobile Software Development Kit 1 record MEDIUM Uni2ts 1 record MEDIUM Workbench 1 record LOW

Records

3 records in Mulesoft Anypoint Code Builder · all components

TI-2025-39753 CVE-2025-64318 · GHSA-cgq7-3vmm-7c3m

Code injection in Salesforce Mulesoft Anypoint Code Builder

LOW 30

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: befo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00236 Published 2025-11-04 Fixed in 1.12.1 CWE-1427

TI-2025-09959 CVE-2025-10875 · GHSA-75vx-vv5g-q5cq

Code injection in Salesforce Mulesoft Anypoint Code Builder

LOW 30

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.This issue affects Mulesoft Anypoint Code Builder: before 1.11.6.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00214 Published 2025-11-04 Fixed in 1.11.6 CWE-1427

TI-2025-39754 CVE-2025-64319 · GHSA-4c2j-p6fq-fm4p

Incorrect permission assignment in Salesforce Mulesoft Anypoint Code Builder

LOW 29

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00224 Published 2025-11-04 Fixed in 1.12.1 CWE-732

Open these records in search →