Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Salesforce Agentforce Vibes Extension 3.3.0 Clear all filters
TI-2025-39757 CVE-2025-64322 · GHSA-4hrg-69hg-xq77

Incorrect permission assignment in Salesforce Agentforce Vibes Extension

Priority LOW 23

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00224 Published 2025-11-04 Fixed in 3.3.0 CWE-732
TI-2025-39756 CVE-2025-64321 · GHSA-x7cq-fpc4-629v

Code injection in Salesforce Agentforce Vibes Extension

Priority LOW 30

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00236 Published 2025-11-04 Fixed in 3.3.0 CWE-1427