PT-2024-28010

Name of the Vulnerable Software and Affected Versions Avalara for Salesforce CPQ versions prior to 7.0 Description The issue allows attackers to read an API key. The current version of the app is 11 as of mid-2024. Recommendations For versions prior to 7.0, update to version 7.0 or later to resol...

CVE-2024-38453: Insufficiently Protected Credentials

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

CVE-2024-38453

The Avalara for Salesforce CPQ app (versions prior to 7.0 ) contains a security vulnerability that allows an attacker to read an API key . This exposure represents a risk of insufficiently protected credentials . While the current version of the app is listed as 11 as of mid-2024, older installat...

Salesforce CPQ Security Breach

Salesforce CPQ is a cloud-based software from US-based Salesforce, Inc. that helps sales reps quickly and accurately configure, price, and quote products. A security vulnerability exists in Salesforce CPQ versions prior to 7.0 that stems from the application allowing an attacker to read API keys...