Lucene search
+L

591 matches found

Positive Technologies
Positive Technologies
added 2025/05/20 12:00 a.m.8 views

PT-2025-22119 · Salesforce · Omnis Studio

Name of the Vulnerable Software and Affected Versions: Salesforce OmniStudio versions prior to Spring 2025 Description: The issue concerns the improper preservation of permissions in Salesforce OmniStudio FlexCards, allowing the bypass of field-level security controls for OmniUICard objects...

5.3CVSS9.4AI score0.00393EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/05/20 12:00 a.m.13 views

PT-2025-22121 · Salesforce · Omnis Studio

Name of the Vulnerable Software and Affected Versions: Salesforce OmniStudio versions prior to 254 Description: The issue is related to an Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards, which allows exposure of Custom Settings data. Recommendations: For...

7.5CVSS9.2AI score0.00425EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/05/20 12:00 a.m.10 views

PT-2025-22118 · Salesforce · Omnis Studio

Name of the Vulnerable Software and Affected Versions: Salesforce OmniStudio versions prior to Spring 2025 Description: The issue is related to an Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards, which allows the bypass of field level security controls for...

9.1CVSS9.3AI score0.00458EPSS
SaveExploits0References5
HackRead
HackRead
added 2025/05/16 10:48 p.m.16 views

HubSpot vs Salesforce: Which CRM Fits Your Business?

You’ve got an important choice to make: HubSpot or Salesforce?...

7.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/09 3:25 p.m.16 views

CVE-2025-47455

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and Salesforce woo-salesforce-plugin-crm-perks allows Phishing.This issue affects Integration for WooCommerce and Salesforce: from n/a through = 1.7.5...

4.7CVSS7.2AI score0.00309EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/07 3:15 p.m.23 views

CVE-2025-47455

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and Salesforce woo-salesforce-plugin-crm-perks allows Phishing.This issue affects Integration for WooCommerce and Salesforce: from n/a through = 1.7.5...

4.7CVSS0.00309EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/07 2:19 p.m.61 views

CVE-2025-47455

CVE-2025-47455 describes an Open Redirect vulnerability in the WordPress plugin Integration for WooCommerce and Salesforce (CRM Perks Integrations) affecting versions up to 1.7.5. The issue enables phishing via redirection to untrusted sites. Connected sources confirm the affected software and th...

4.7CVSS7.2AI score0.00309EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/07 2:19 p.m.36 views

CVE-2025-47455 WordPress Integration for WooCommerce and Salesforce plugin <= 1.7.5 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and Salesforce woo-salesforce-plugin-crm-perks allows Phishing.This issue affects Integration for WooCommerce and Salesforce: from n/a through = 1.7.5...

4.7CVSS0.00309EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/05/07 12:27 p.m.9 views

WordPress Integration for WooCommerce and Salesforce plugin <= 1.7.5 - Open Redirection Vulnerability

Open Redirection Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Integration for WooCommerce and Salesforce versions = 1.7.5...

4.7CVSS8.2AI score0.00309EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.7 views

WordPress plugin Integration for WooCommerce and Salesforce 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...

4.7CVSS6AI score0.00309EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/16 1:21 p.m.9 views

CVE-2025-23657

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RusAlex WordPress-to-candidate for Salesforce CRM salesforce-wordpress-to-candidate allows Reflected XSS.This issue affects WordPress-to-candidate for Salesforce CRM: from n/a through = 1.0.1...

7.1CVSS7.2AI score0.00302EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/02/14 1:15 p.m.6 views

CVE-2025-23657

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RusAlex WordPress-to-candidate for Salesforce CRM salesforce-wordpress-to-candidate allows Reflected XSS.This issue affects WordPress-to-candidate for Salesforce CRM: from n/a through = 1.0.1...

7.1CVSS7.2AI score0.00302EPSS
SaveExploits0References3
NVD
NVD
added 2025/02/14 1:15 p.m.8 views

CVE-2025-23657

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RusAlex WordPress-to-candidate for Salesforce CRM salesforce-wordpress-to-candidate allows Reflected XSS.This issue affects WordPress-to-candidate for Salesforce CRM: from n/a through = 1.0.1...

7.1CVSS0.00302EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/14 12:44 p.m.21 views

CVE-2025-23657 WordPress WordPress-to-candidate for Salesforce CRM plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RusAlex WordPress-to-candidate for Salesforce CRM salesforce-wordpress-to-candidate allows Reflected XSS.This issue affects WordPress-to-candidate for Salesforce CRM: from n/a through = 1.0.1...

7.1CVSS0.00302EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/14 12:44 p.m.11 views

CVE-2025-23657 WordPress WordPress-to-candidate for Salesforce CRM plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RusAlex WordPress-to-candidate for Salesforce CRM salesforce-wordpress-to-candidate allows Reflected XSS.This issue affects WordPress-to-candidate for Salesforce CRM: from n/a through = 1.0.1...

7.1CVSS7.2AI score0.00302EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/14 12:05 p.m.20 views

CVE-2025-26494

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5...

7.7CVSS6.9AI score0.00559EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/14 12:00 a.m.6 views

WordPress plugin WordPress-to-candidate for Salesforce CRM 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00302EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/14 12:00 a.m.7 views

PT-2025-6999 · Unknown · Wordpress-To-Candidate For Salesforce Crm

Name of the Vulnerable Software and Affected Versions: WordPress-to-candidate for Salesforce CRM versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables...

7.1CVSS9.3AI score0.00302EPSS
SaveExploits0References4
Veeam
Veeam
added 2025/02/12 12:00 a.m.20 views

How to upgrade Veeam Backup for Salesforce to version 2.1.1.

Challenge Customers who installed Veeam Backup for Salesforce 2.x on the following distros before April 2024 won't see the upgrade notification in the product due to the expiration of GPG keys and must perform the upgrade manually. CentOS 7 Red Hat Enterprise Linux 7 Oracle Linux 7 Solution...

7AI score
SaveExploits0Affected Software1
NVD
NVD
added 2025/02/11 6:15 p.m.36 views

CVE-2025-26494

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5...

7.7CVSS0.00559EPSS
SaveExploits0References1
Rows per page
Query Builder