Read the docs

Salesforce

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

Salesforce records in CISA KEV

No Salesforce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Marketing Cloud Engagement 4 records MEDIUM Mule 4 records MEDIUM Agentforce Vibes 3 records LOW Mulesoft Anypoint Code Builder 3 records LOW Tough-cookie 3 records HIGH Mobile Software Development Kit 1 record MEDIUM Uni2ts 1 record MEDIUM Workbench 1 record LOW

Records

1 record in Uni2ts · all components

TI-2026-18145 CVE-2026-22584 · GHSA-7x99-8x99-xc54

Code injection in Salesforce Uni2TS

Priority MEDIUM 49

Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00436 Published 2026-01-09 Fixed in 2.0.0 CWE-94
Open these records in search →