Salesforce Marketing Cloud Engagement vulnerabilities

5 vulnerabilities

Known vulnerabilities in Salesforce Marketing Cloud Engagement, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.4CVE-2026-2298salesforcemarketing_cloud_engagement
EPSS score
0.43%
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026.9.8CVE-2026-22586salesforcemarketing_cloud_engagement
EPSS score
0.60%
Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.9.8CVE-2026-22583salesforcemarketing_cloud_engagement
EPSS score
0.65%
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.9.8CVE-2026-22582salesforcemarketing_cloud_engagement
EPSS score
0.65%
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.9.8CVE-2026-22585salesforcemarketing_cloud_engagement
EPSS score
0.43%
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.