Lucene search
+L

606 matches found

NVD
NVD
added 2025/05/07 3:15 p.m.24 views

CVE-2025-47455

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and Salesforce woo-salesforce-plugin-crm-perks allows Phishing.This issue affects Integration for WooCommerce and Salesforce: from n/a through = 1.7.5...

4.7CVSS0.00309EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/07 2:19 p.m.68 views

CVE-2025-47455

CVE-2025-47455 describes an Open Redirect vulnerability in the WordPress plugin Integration for WooCommerce and Salesforce (CRM Perks Integrations) affecting versions up to 1.7.5. The issue enables phishing via redirection to untrusted sites. Connected sources confirm the affected software and th...

4.7CVSS7.2AI score0.00309EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/07 2:19 p.m.39 views

CVE-2025-47455 WordPress Integration for WooCommerce and Salesforce plugin <= 1.7.5 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and Salesforce woo-salesforce-plugin-crm-perks allows Phishing.This issue affects Integration for WooCommerce and Salesforce: from n/a through = 1.7.5...

4.7CVSS0.00309EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/05/07 12:27 p.m.10 views

WordPress Integration for WooCommerce and Salesforce plugin <= 1.7.5 - Open Redirection Vulnerability

Open Redirection Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Integration for WooCommerce and Salesforce versions = 1.7.5...

4.7CVSS8.2AI score0.00309EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.8 views

WordPress plugin Integration for WooCommerce and Salesforce 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...

4.7CVSS6AI score0.00309EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/16 1:21 p.m.12 views

CVE-2025-23657

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RusAlex WordPress-to-candidate for Salesforce CRM salesforce-wordpress-to-candidate allows Reflected XSS.This issue affects WordPress-to-candidate for Salesforce CRM: from n/a through = 1.0.1...

7.1CVSS7.2AI score0.00308EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/14 1:15 p.m.11 views

CVE-2025-23657

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RusAlex WordPress-to-candidate for Salesforce CRM salesforce-wordpress-to-candidate allows Reflected XSS.This issue affects WordPress-to-candidate for Salesforce CRM: from n/a through = 1.0.1...

7.1CVSS0.00308EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/02/14 1:15 p.m.6 views

CVE-2025-23657

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RusAlex WordPress-to-candidate for Salesforce CRM salesforce-wordpress-to-candidate allows Reflected XSS.This issue affects WordPress-to-candidate for Salesforce CRM: from n/a through = 1.0.1...

7.1CVSS7.2AI score0.00308EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/02/14 12:44 p.m.25 views

CVE-2025-23657 WordPress WordPress-to-candidate for Salesforce CRM plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RusAlex WordPress-to-candidate for Salesforce CRM salesforce-wordpress-to-candidate allows Reflected XSS.This issue affects WordPress-to-candidate for Salesforce CRM: from n/a through = 1.0.1...

7.1CVSS0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/14 12:44 p.m.12 views

CVE-2025-23657 WordPress WordPress-to-candidate for Salesforce CRM plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RusAlex WordPress-to-candidate for Salesforce CRM salesforce-wordpress-to-candidate allows Reflected XSS.This issue affects WordPress-to-candidate for Salesforce CRM: from n/a through = 1.0.1...

7.1CVSS7.2AI score0.00308EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/14 12:05 p.m.23 views

CVE-2025-26494

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5...

7.7CVSS6.9AI score0.0057EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/14 12:00 a.m.8 views

WordPress plugin WordPress-to-candidate for Salesforce CRM 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00308EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/14 12:00 a.m.8 views

PT-2025-6999 · Unknown · Wordpress-To-Candidate For Salesforce Crm

Name of the Vulnerable Software and Affected Versions: WordPress-to-candidate for Salesforce CRM versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables...

7.1CVSS9.3AI score0.00308EPSS
SaveExploits0References4
Veeam
Veeam
added 2025/02/12 12:00 a.m.24 views

How to upgrade Veeam Backup for Salesforce to version 2.1.1.

Challenge Customers who installed Veeam Backup for Salesforce 2.x on the following distros before April 2024 won't see the upgrade notification in the product due to the expiration of GPG keys and must perform the upgrade manually. CentOS 7 Red Hat Enterprise Linux 7 Oracle Linux 7 Solution...

7AI score
SaveExploits0Affected Software1
NVD
NVD
added 2025/02/11 6:15 p.m.40 views

CVE-2025-26494

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5...

7.7CVSS0.0057EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/11 6:15 p.m.27 views

CVE-2025-26495

Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token PAT into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14, before 2021.1.16, before 2020.4.19...

7.5CVSS0.00337EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/11 5:56 p.m.404 views

CVE-2025-26495

CVE-2025-26495 affects Salesforce Tableau Server. The issue is Cleartext Storage of Sensitive Information: Personal Access Tokens (PAT) can be recorded in logging repositories. Affected Tableau Server versions include pre-2022.1.3, pre-2021.4.8, pre-2021.3.13, pre-2021.2.14, pre-2021.1.16, and pr...

7.5CVSS6.6AI score0.00337EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2025/02/11 5:33 p.m.146 views

CVE-2025-26494

CVE-2025-26494 is a Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server that enables authentication bypass on Tableau Server versions 2023.3 through 2023.3.5. The connected sources corroborate the SSRF and the affected range; Red Hat and PT-Security entries provide concr...

7.7CVSS6.7AI score0.0057EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/02/11 12:00 a.m.28 views

Salesforce Tableau 安全漏洞

Salesforce Tableau is a data visualization and analytics platform from Salesforce, Inc. A security vulnerability exists in Salesforce Tableau that stems from a plaintext storage of sensitive information vulnerability that could result in personal access tokens being logged...

7.5CVSS6.3AI score0.00337EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/11 12:00 a.m.10 views

Salesforce Tableau 安全漏洞

Salesforce Tableau is a data visualization and analytics platform from Salesforce, Inc. A security vulnerability exists in Salesforce Tableau versions 2023.3.X through 2023.3.5, which stems from a server-side request forgery vulnerability that could lead to authentication bypass...

7.7CVSS6.7AI score0.0057EPSS
SaveExploits0References1
Rows per page
Query Builder