How many Salesforce Marketing Cloud Engagement CVEs are in CISA KEV?

None of Salesforce Marketing Cloud Engagement's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Salesforce Marketing Cloud Engagement are affected?

6 distinct Salesforce Marketing Cloud Engagement versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Salesforce Marketing Cloud Engagement CVEs?

Salesforce Marketing Cloud Engagement's CVEs most often map to these CWE weakness types: CWE-88 (Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')), CWE-321 (Use of Hard-coded Cryptographic Key), CWE-327 (Use of a Broken or Risky Cryptographic Algorithm).

What is the average severity of Salesforce Marketing Cloud Engagement CVEs?

The average CVSS base score across Salesforce Marketing Cloud Engagement's scored CVEs is 9.7.

RadicalNotion.AI

Log in Start free

Salesforce

5 CVEs

Salesforce Marketing Cloud Engagement Vulnerabilities

Name: Salesforce Marketing Cloud Engagement vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Marketing Cloud Engagement by Salesforce.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

9.7

Avg CVSS

2026–2026

Last updated March 23, 2026

Overview

Salesforce Marketing Cloud Engagement has 5 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 9.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Salesforce Marketing Cloud Engagement, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Salesforce Marketing Cloud Engagement's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High0

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Salesforce Marketing Cloud Engagement's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Salesforce Marketing Cloud Engagement CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Salesforce Marketing Cloud Engagement version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 2026-01-214 CVEs
< January 21, 20264 CVEs
< January 30th, 20261 CVE

Fixed in

2026-01-214 CVEs
January 21, 20264 CVEs
January 30th, 20261 CVE

Find a version

5 CVEs

Sort

Critical vulnerability · 2026-03-23
CVE-2026-2298
Patch
CWE-88
Critical · CVSS 9.4
EPSS 0.4% (34th pct)2026-03-23
Critical vulnerability · 2026-01-24
CVE-2026-22583
Patch
CWE-88
Critical · CVSS 9.8
EPSS 0.7% (50th pct)2026-01-24
Critical vulnerability · 2026-01-24
CVE-2026-22582
Patch
CWE-88
Critical · CVSS 9.8
EPSS 0.7% (50th pct)2026-01-24
Critical vulnerability · 2026-01-24
CVE-2026-22586
Patch
CWE-321
Critical · CVSS 9.8
EPSS 0.6% (48th pct)2026-01-24
Critical vulnerability · 2026-01-24
CVE-2026-22585
Patch
CWE-327
Critical · CVSS 9.8
EPSS 0.4% (37th pct)2026-01-24

Common weakness types

The CWE weakness categories most often found in Salesforce Marketing Cloud Engagement CVEs. Follow any weakness for its full explanation.

Other Salesforce products

Browse vulnerabilities for other products by Salesforce.

Tableau Server15 CVEs OmniStudio5 CVEs mule4 CVEs agentforce vibes3 CVEs Agentforce Vibes Extension3 CVEs mulesoft anypoint code builder3 CVEs tough-cookie3 CVEs CloudPagesUrl1 CVEs

All Salesforce vulnerabilities

Frequently asked questions

Common questions about Salesforce Marketing Cloud Engagement vulnerabilities.

How many CVEs does Salesforce Marketing Cloud Engagement have?: Salesforce Marketing Cloud Engagement has 5 published CVE records since 2026.
How many Salesforce Marketing Cloud Engagement CVEs are in CISA KEV?: None of Salesforce Marketing Cloud Engagement's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Salesforce Marketing Cloud Engagement vulnerabilities?: No Salesforce Marketing Cloud Engagement CVEs currently have a tracked public exploit in this dataset.
Which versions of Salesforce Marketing Cloud Engagement are affected?: 6 distinct Salesforce Marketing Cloud Engagement versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Salesforce Marketing Cloud Engagement CVEs?: Salesforce Marketing Cloud Engagement's CVEs most often map to these CWE weakness types: CWE-88 (Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')), CWE-321 (Use of Hard-coded Cryptographic Key), CWE-327 (Use of a Broken or Risky Cryptographic Algorithm).
How many critical Salesforce Marketing Cloud Engagement vulnerabilities are there?: Salesforce Marketing Cloud Engagement has 5 critical and 0 high-severity CVEs.
What is the average severity of Salesforce Marketing Cloud Engagement CVEs?: The average CVSS base score across Salesforce Marketing Cloud Engagement's scored CVEs is 9.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Salesforce Marketing Cloud Engagement vulnerabilities

Monitor new Salesforce Marketing Cloud Engagement vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing