Salesforce

Records44All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

Salesforce records in CISA KEV

No Salesforce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Marketing Cloud Engagement 4 records MEDIUM Mule 4 records MEDIUM Agentforce Vibes 3 records LOW Mulesoft Anypoint Code Builder 3 records LOW Tough-cookie 3 records HIGH Mobile Software Development Kit 1 record MEDIUM Uni2ts 1 record MEDIUM Workbench 1 record LOW

Records

3 records in Tough-cookie · all components

TI-2023-11360 CVE-2023-26136 · GHSA-72xf-g2v4-qvf3

Prototype pollution in tough-cookie

HIGH 81

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02627 Published 2023-07-01 Partial fix · 4.1.3 CWE-1321

TI-2017-11015 CVE-2017-15010 · GHSA-g7q5-pjjr-gqvp

A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module…

LOW 39

A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03283 Published 2017-10-03 Fixed in 2.3.3 CWE-400

TI-2016-09353 CVE-2016-1000232 · GHSA-qhv9-728r-6jqg

NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in…

LOW 29

NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02356 Published 2018-09-05 Partial fix · 2.3.0 CWE-20

Open these records in search →

Critical	13
High	19
Medium	12
Low	0
No CVSS	0