MC
Product
Marketing Cloud Engagement
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 0Medium 0Low 0
Watch
Add Marketing Cloud Engagement to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-22583 | 9.8 | Jan 24 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web… Affected: before January 21, 2026 |
| CVE-2026-22582 | 9.8 | Jan 24 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module) allows Web Services… Affected: before January 21, 2026 |
| CVE-2026-22586 | 9.8 | Jan 24 | Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As… Affected: before January 21, 2026 |
| CVE-2026-22585 | 9.8 | Jan 24 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center,… Affected: before January 21, 2026 |
| CVE-2026-2298 | 9.4 | Mar 23 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation Affected: before January 30th, 2026 |
Showing 5