How to Migrate Veeam Backup for Salesforce off CentOS

Purpose This article documents how to migrate a Veeam Backup for Salesforce VBSF deployment from a machine running CentOS 7 to a machine running a supported Linux distro. Starting in Veeam Backup for Salesforce version 3, CentOS will no longer be supported as a distro for the deployment of Veeam...

CVE-2024-39344

An issue was discovered in the Docusign API package 8.142.14 for Salesforce. The ApttusDocuApiDocusignAuthenticationmdt object is installed via the marketplace from this package and stores some configuration information in a manner that could be compromised. With the default settings when install...

CVE-2024-39344

An issue was discovered in the Docusign API package 8.142.14 for Salesforce. The ApttusDocuApiDocusignAuthenticationmdt object is installed via the marketplace from this package and stores some configuration information in a manner that could be compromised. With the default settings when install...

CVE-2024-39344

An issue was discovered in the Docusign API package 8.142.14 for Salesforce. The ApttusDocuApiDocusignAuthenticationmdt object is installed via the marketplace from this package and stores some configuration information in a manner that could be compromised. With the default settings when install...

PT-2024-28462 · Docusign · Docusign Api

Name of the Vulnerable Software and Affected Versions: Docusign API package version 8.142.14 for Salesforce Description: An issue was discovered in the Docusign API package for Salesforce, where the Apttus DocuApi DocusignAuthentication mdt object stores configuration information in a manner that...

CVE-2024-39344

The CVE-2024-39344 issue affects the Docusign API package version 8.142.14 for Salesforce. The Apttus_DocuApi__DocusignAuthentication__mdt object installed from the package stores configuration information and, under default settings, can be accessed to disclose keys. Those disclosed components c...

U.S. Dept Of Defense: Sensitive data exposure: █████████ candidate resumes/CVs available to download with no authentication through BAC/IDOR/Improper Salesforce config

The sensitive data exposure vulnerability allowed an attacker to download thousands of candidate resumes and other confidential files without authentication through a Salesforce community site...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to arbitrary code execution

Summary Salesforce tough-cookie is used by IBM App Connect Enterprise Certified Container for handling cookies. IBM App Connect Enterprise Certified Container operands are vulnerable to arbitrary code execution. This bulletin provides patch information to address the reported vulnerability in...

CVE-2024-38453

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

CVE-2024-38453

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

CVE-2024-38453

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

Salesforce CPQ Security Breach

Salesforce CPQ is a cloud-based software from US-based Salesforce, Inc. that helps sales reps quickly and accurately configure, price, and quote products. A security vulnerability exists in Salesforce CPQ versions prior to 7.0 that stems from the application allowing an attacker to read API keys...

CVE-2024-38453

CVE-2024-38453 affects the Avalara for Salesforce CPQ app for Salesforce, prior to version 7.0. The vulnerability allows attackers to read an API key. The public notes indicate the current version is 11 as of mid-2024. The connected documents do not provide detailed root cause analysis, specific ...

Malicious code in CData.Salesforce.Net.Framework (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-32148

Missing Authorization vulnerability in Salesforce Pardot.This issue affects Pardot: from n/a through 2.1.0...

CVE-2024-32148 WordPress Pardot plugin <= 2.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Salesforce Pardot.This issue affects Pardot: from n/a through 2.1.0...

CVE-2024-32148 WordPress Pardot plugin <= 2.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Salesforce Pardot.This issue affects Pardot: from n/a through 2.1.0...

CVE-2024-32148

CVE-2024-32148 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress Pardot plugin, affecting Pardot versions up to 2.1.0. The connected sources describe it as Missing Authorization/Broken Access Control; no explicit exploit, affected product/version details beyond thi...

Integration for Contact Form 7 and Salesforce <= <=1.3.9 - Cross-Site Request Forgery

Description The Integration for Contact Form 7 and Salesforce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, =1.3.9. This is due to missing or incorrect nonce validation on the settingspage function. This makes it possible for unauthenticated...

CVE-2024-34755

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Integration for Contact Form 7 and Salesforce.This issue affects Integration for Contact Form 7 and Salesforce: from n/a through 1.3.9...