Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2025/11/07 1:46 p.m.2 views

CVE-2025-64320

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0...

6.5CVSS7AI score0.00047EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/07 1:46 p.m.2 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS6.8AI score0.00037EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/07 1:46 p.m.1 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS7AI score0.00043EPSS
Exploits0References1
NVD
NVD
added 2025/11/04 7:17 p.m.6 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS0.00043EPSS
Exploits0References1
OSV
OSV
added 2025/11/04 7:17 p.m.1 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2025/11/04 7:17 p.m.2 views

CVE-2025-64320

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0...

6.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/11/04 7:17 p.m.1 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS0.00037EPSS
Exploits0References1
NVD
NVD
added 2025/11/04 7:17 p.m.3 views

CVE-2025-64320

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0...

6.5CVSS0.00047EPSS
Exploits0References1
OSV
OSV
added 2025/11/04 7:17 p.m.0 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS5.8AI score0.00043EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/04 6:33 p.m.1 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

6.6AI score0.00043EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/04 6:33 p.m.4 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

0.00043EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/04 6:30 p.m.3 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

0.00037EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/04 6:30 p.m.1 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

6.5AI score0.00037EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/04 6:27 p.m.1 views

CVE-2025-64320

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0...

6.6AI score0.00047EPSS
Exploits0References1
CVE
CVE
added 2025/11/04 6:27 p.m.5 views

CVE-2025-64320

The vulnerability CVE-2025-64320 affects Salesforce Agentforce Vibes Extension prior to 3.2.0. The issue arises from improper neutralization of inputs used for LLM prompting, which can enable code injection via crafted prompts. Affected component: Agentforce Vibes Extension (client-side extension...

6.5CVSS6.6AI score0.00047EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.3 views

PT-2025-45035

Name of the Vulnerable Software and Affected Versions Salesforce Agentforce Vibes Extension versions prior to 3.2.0 Description An incorrect permission assignment for a critical resource exists in Salesforce Agentforce Vibes Extension, allowing manipulation of writable configuration files...

5.3CVSS6.5AI score0.00043EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.1 views

Salesforce Agentforce Vibes Extension 安全漏洞

Salesforce Agentforce Vibes Extension is an AI-coded agent extension from Salesforce USA. A security vulnerability exists in Salesforce Agentforce Vibes Extension versions prior to 3.2.0, which stems from improper assignment of critical resource permissions and could lead to tampering with writab...

5.3CVSS6.6AI score0.00043EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.1 views

Salesforce Agentforce Vibes Extension 安全漏洞

Salesforce Agentforce Vibes Extension is an AI-coded agent extension from Salesforce USA. A security vulnerability exists in Salesforce Agentforce Vibes Extension versions prior to 3.2.0 that stems from improper neutralization of LLM prompt inputs, which could lead to manipulation of writable...

5.3CVSS6.5AI score0.00037EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.1 views

Salesforce Agentforce Vibes Extension 安全漏洞

Salesforce Agentforce Vibes Extension is an AI-coded agent extension from Salesforce, Inc. in the United States. A security vulnerability exists in Salesforce Agentforce Vibes Extension versions prior to 3.2.0 that stems from improper neutralization of LLM prompt inputs, which could lead to code...

6.5CVSS6.9AI score0.00047EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.2 views

PT-2025-45034

Name of the Vulnerable Software and Affected Versions Salesforce Agentforce Vibes Extension versions prior to 3.2.0 Description An issue exists in Salesforce Agentforce Vibes Extension related to improper neutralization of input used for LLM prompting, potentially allowing manipulation of writabl...

5.3CVSS6.6AI score0.00037EPSS
Exploits0References5
Rows per page
Query Builder