Lucene search
+L

18 matches found

RedhatCVE
RedhatCVE
•added 2025/11/07 1:46 p.m.•13 views

CVE-2025-64320

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0...

6.5CVSS7AI score0.002EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/07 1:46 p.m.•13 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS6.8AI score0.00221EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/07 1:46 p.m.•15 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS7AI score0.00209EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/04 7:17 p.m.•13 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS5.8AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/04 7:17 p.m.•30 views

CVE-2025-64320

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0...

6.5CVSS0.002EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/04 7:17 p.m.•43 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS0.00209EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/04 7:17 p.m.•17 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS5.8AI score0.00221EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/04 7:17 p.m.•16 views

CVE-2025-64320

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0...

6.5CVSS5.8AI score0.002EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/04 6:33 p.m.•7 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

6.6AI score0.00209EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/04 6:33 p.m.•21 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

0.00209EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/04 6:30 p.m.•10 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

6.5AI score0.00221EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/04 6:30 p.m.•33 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

0.00221EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/04 6:27 p.m.•45 views

CVE-2025-64320

The Salesforce Agentforce Vibes Extension (versions prior to 3.2.0 ) is vulnerable to Code Injection due to improper neutralization of input used for LLM prompting. An attacker could manipulate inputs used in prompts for Large Language Models to execute arbitrary code. Remediation involves updati...

6.5CVSS6.6AI score0.002EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•2 views

CVE-2025-64320: Undefined Security Weakness

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0...

6.5CVSS5.8AI score0.002EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•2 views

CVE-2025-64322: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS5.8AI score0.00209EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•2 views

CVE-2025-64321: Undefined Security Weakness

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS5.8AI score0.00221EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•16 views

Salesforce Agentforce Vibes Extension 安全漏洞

Salesforce Agentforce Vibes Extension is an AI-coded agent extension from Salesforce USA. A security vulnerability exists in Salesforce Agentforce Vibes Extension versions prior to 3.2.0 that stems from improper neutralization of LLM prompt inputs, which could lead to manipulation of writable...

5.3CVSS6.5AI score0.00221EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•19 views

Salesforce Agentforce Vibes Extension 安全漏洞

Salesforce Agentforce Vibes Extension is an AI-coded agent extension from Salesforce, Inc. in the United States. A security vulnerability exists in Salesforce Agentforce Vibes Extension versions prior to 3.2.0 that stems from improper neutralization of LLM prompt inputs, which could lead to code...

6.5CVSS6.9AI score0.002EPSS
SaveExploits0References1
Rows per page
Query Builder