678 matches found
CVE-2025-26494
Salesforce Tableau Server versions 2023.3 through 2023.3.5 are affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). This flaw can lead to an Authentication Bypass , potentially allowing an attacker to circumvent security mechanisms and gain unauthorized access to the system. ...
Salesforce Tableau 安全漏洞
Salesforce Tableau is a data visualization and analytics platform from Salesforce, Inc. A security vulnerability exists in Salesforce Tableau that stems from a plaintext storage of sensitive information vulnerability that could result in personal access tokens being logged...
Salesforce Tableau 安全漏洞
Salesforce Tableau is a data visualization and analytics platform from Salesforce, Inc. A security vulnerability exists in Salesforce Tableau versions 2023.3.X through 2023.3.5, which stems from a server-side request forgery vulnerability that could lead to authentication bypass...
U.S. Dept Of Defense: Air Force candidate PII + recruitment chat logs accessible via BAC/IDOR on █████████ (very large/significant exposure)
A vulnerability was discovered in a Department of Defense-owned Salesforce asset that allowed unauthorized access to sensitive personal information of Air Force candidates. The vulnerability stemmed from a misconfiguration in the Document object, which permitted an attacker to retrieve a large...
WordPress WordPress-to-candidate for Salesforce CRM plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin WordPress-to-candidate for Salesforce CRM versions = 1.0.1...
The Role of Salesforce Implementation in Digital Transformation
Companies today constantly look for ways to improve their work with customers and perform better overall. The transition…...
Release Information for Veeam Backup for Salesforce 3 Cumulative Patches
Requirements Please confirm that you are running Veeam Backup for Salesforce 3 build 3.1.2.3957 or earlier before upgrading. You can find the currently installed build number in the Configuration About section. After the upgrade, the Veeam Backup for Salesforce build number will be3.2.1.4038...
Veeam Backup for Salesforce Built-In Updater Not Finding Updates
Challenge In Veeam Backup for Salesforce v1, the Updater displays no updates available despite the fact that newer versions are available. Cause The updater fails to identify new updates as being available because of an expired or incorrect GPG key used to verify package integrity. Without the...
How to Migrate Veeam Backup for Salesforce off CentOS
Purpose This article documents how to migrate a Veeam Backup for Salesforce VBSF deployment from a machine running CentOS 7 to a machine running a supported Linux distro. Starting in Veeam Backup for Salesforce version 3, CentOS will no longer be supported as a distro for the deployment of Veeam...
CVE-2024-39344
An issue was discovered in the Docusign API package 8.142.14 for Salesforce. The ApttusDocuApiDocusignAuthenticationmdt object is installed via the marketplace from this package and stores some configuration information in a manner that could be compromised. With the default settings when install...
CVE-2024-39344
A vulnerability exists in the Docusign API package version 8.142.14 for Salesforce . The Apttus_DocuApi__DocusignAuthentication__mdt object, installed via the marketplace, improperly stores configuration information. With default settings, this object may be accessible to users, potentially discl...
CVE-2024-39344
An issue was discovered in the Docusign API package 8.142.14 for Salesforce. The ApttusDocuApiDocusignAuthenticationmdt object is installed via the marketplace from this package and stores some configuration information in a manner that could be compromised. With the default settings when install...
CVE-2024-39344: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in the Docusign API package 8.142.14 for Salesforce. The ApttusDocuApiDocusignAuthenticationmdt object is installed via the marketplace from this package and stores some configuration information in a manner that could be compromised. With the default settings when install...
CVE-2024-39344
An issue was discovered in the Docusign API package 8.142.14 for Salesforce. The ApttusDocuApiDocusignAuthenticationmdt object is installed via the marketplace from this package and stores some configuration information in a manner that could be compromised. With the default settings when install...
PT-2024-28462 · Docusign · Docusign Api
Name of the Vulnerable Software and Affected Versions: Docusign API package version 8.142.14 for Salesforce Description: An issue was discovered in the Docusign API package for Salesforce, where the Apttus DocuApi DocusignAuthentication mdt object stores configuration information in a manner that...
U.S. Dept Of Defense: Sensitive data exposure: █████████ candidate resumes/CVs available to download with no authentication through BAC/IDOR/Improper Salesforce config
The sensitive data exposure vulnerability allowed an attacker to download thousands of candidate resumes and other confidential files without authentication through a Salesforce community site...
Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to arbitrary code execution
Summary Salesforce tough-cookie is used by IBM App Connect Enterprise Certified Container for handling cookies. IBM App Connect Enterprise Certified Container operands are vulnerable to arbitrary code execution. This bulletin provides patch information to address the reported vulnerability in...
CVE-2024-38453
The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...
CVE-2024-38453: Insufficiently Protected Credentials
The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...