Approved changes feed: RSS · Atom

cpe:2.3:a:salesforce:marketing_cloud_engagement:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSalesforce (cfdafdea-90cf-5590-ad24-239f205b7d02)
ProductMarketing Cloud Engagement (fc76c30e-e7c3-5970-9a79-73684b94ec7c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2298 vulnerable 2026-06-03 15:19:23.948402 Details available
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026.
Published: 2026-03-23T19:54:32.967Z
Updated: 2026-04-29T19:26:59.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22586 vulnerable 2026-06-03 15:15:53.640692 Details available
Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.
Published: 2026-01-24T00:17:08.285Z
Updated: 2026-04-29T19:19:33.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22585 vulnerable 2026-06-03 15:15:53.640280 Details available
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.
Published: 2026-01-24T00:15:02.891Z
Updated: 2026-04-29T19:22:03.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22583 vulnerable 2026-06-03 15:15:53.634069 Details available
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.
Published: 2026-01-24T00:20:54.718Z
Updated: 2026-04-29T19:25:53.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22582 vulnerable 2026-06-03 15:15:53.633724 Details available
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.
Published: 2026-01-24T00:19:26.449Z
Updated: 2026-04-29T19:24:51.939Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.