Salesforce

Records44All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

Salesforce records in CISA KEV

No Salesforce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Marketing Cloud Engagement 4 records MEDIUM Mule 4 records MEDIUM Agentforce Vibes 3 records LOW Mulesoft Anypoint Code Builder 3 records LOW Tough-cookie 3 records HIGH Mobile Software Development Kit 1 record MEDIUM Uni2ts 1 record MEDIUM Workbench 1 record LOW

Records

1 record in Workbench · all components

TI-2026-27175 CVE-2026-34951

Reflected XSS in footer.php in Workbench Allows Attackers to Hijack Authenticated Sessions

LOW 22

Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00155 Published 2026-04-06 Fixed in 65.0.0 CWE-79

Open these records in search →