CVEs we hold for Salesforce

Records whose assigning authority named Salesforce as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-2298no title heldSalesforce Marketing Cloud Engagement

CVE-2026-22586no title heldSalesforce Marketing Cloud Engagement

CVE-2026-22585no title heldSalesforce Marketing Cloud Engagement

CVE-2026-22584no title heldSalesforce Uni2TS

CVE-2026-22583no title heldSalesforce Marketing Cloud Engagement

CVE-2026-22582no title heldSalesforce Marketing Cloud Engagement

CVE-2025-9844no title heldSalesforce CLI

CVE-2025-64322no title heldSalesforce Agentforce Vibes Extension

CVE-2025-64321no title heldSalesforce Agentforce Vibes Extension

CVE-2025-64320no title heldSalesforce Agentforce Vibes Extension

CVE-2025-64319no title heldSalesforce Mulesoft Anypoint Code Builder

CVE-2025-64318no title heldSalesforce Mulesoft Anypoint Code Builder

CVE-2025-52455no title heldSalesforce Tableau Server

CVE-2025-52454no title heldSalesforce Tableau Server

CVE-2025-52453no title heldSalesforce Tableau Server

CVE-2025-52452no title heldSalesforce Tableau Server

CVE-2025-52451no title heldSalesforce Tableau Server

CVE-2025-52450no title heldSalesforce Tableau Server

CVE-2025-52449no title heldSalesforce Tableau Server

CVE-2025-52448no title heldSalesforce Tableau Server

CVE-2025-52447no title heldSalesforce Tableau Server

CVE-2025-52446no title heldSalesforce Tableau Server

CVE-2025-43701no title heldSalesforce OmniStudio

CVE-2025-43700no title heldSalesforce OmniStudio

CVE-2025-43699no title heldSalesforce OmniStudio

CVE-2025-43698no title heldSalesforce OmniStudio

CVE-2025-43697no title heldSalesforce OmniStudio

CVE-2025-26498no title heldSalesforce Tableau Server

CVE-2025-26497no title heldSalesforce Tableau Server

CVE-2025-26496no title heldSalesforce Tableau Server, Tableau Desktop

CVE-2025-26495Sensitive Data Exposure in Tableau ServerSalesforce Tableau Server

CVE-2025-26494Server Side Request Forgery vulnerability in Tableau ServerSalesforce Tableau Server

CVE-2025-10875no title heldSalesforce Mulesoft Anypoint Code Builder

CVE-2024-32148WordPress Pardot plugin <= 2.1.0 - Broken Access Control vulnerabilitySalesforce Pardot

CVE-2019-15630no title heldSalesforce, Inc. Mulesoft API Gateway

35 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.