# Salesforce CVEs > Salesforce: 33 CVEs mapped to its software or packages (0 in CISA KEV), newest first, with CVSS and EPSS. Canonical: https://rewindex.com/company/salesforce/cves Last updated: 2026-03-23T19:54:32Z 33 CVEs map to Salesforce (0 in CISA KEV), newest first. Page 1. Query: `?sev=critical|high|medium|low&kev=yes|no&min_cvss=0..10&q=&page=N`. Company profile: [Salesforce](https://rewindex.com/company/salesforce.md) Scope: CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. A mapped CVE is not a statement that Salesforce’s hosted service was exposed. | Published (UTC) | CVE | Title | CVSS | KEV | | --- | --- | --- | --- | --- | | 2026-03-23 | [CVE-2026-2298](https://rewindex.com/cve/CVE-2026-2298.md) | | 9.4 critical | | | 2026-01-24 | [CVE-2026-22583](https://rewindex.com/cve/CVE-2026-22583.md) | | 9.8 critical | | | 2026-01-24 | [CVE-2026-22582](https://rewindex.com/cve/CVE-2026-22582.md) | | 9.8 critical | | | 2026-01-24 | [CVE-2026-22586](https://rewindex.com/cve/CVE-2026-22586.md) | | 9.8 critical | | | 2026-01-24 | [CVE-2026-22585](https://rewindex.com/cve/CVE-2026-22585.md) | | 9.8 critical | | | 2026-01-09 | [CVE-2026-22584](https://rewindex.com/cve/CVE-2026-22584.md) | | 9.8 critical | | | 2025-11-04 | [CVE-2025-64322](https://rewindex.com/cve/CVE-2025-64322.md) | | 5.3 medium | | | 2025-11-04 | [CVE-2025-64321](https://rewindex.com/cve/CVE-2025-64321.md) | | 5.3 medium | | | 2025-11-04 | [CVE-2025-64320](https://rewindex.com/cve/CVE-2025-64320.md) | | 6.5 medium | | | 2025-11-04 | [CVE-2025-64319](https://rewindex.com/cve/CVE-2025-64319.md) | | 5.3 medium | | | 2025-11-04 | [CVE-2025-64318](https://rewindex.com/cve/CVE-2025-64318.md) | | 5.3 medium | | | 2025-11-04 | [CVE-2025-10875](https://rewindex.com/cve/CVE-2025-10875.md) | | 6.5 medium | | | 2025-09-23 | [CVE-2025-9844](https://rewindex.com/cve/CVE-2025-9844.md) | | 8.8 high | | | 2025-08-22 | [CVE-2025-52451](https://rewindex.com/cve/CVE-2025-52451.md) | | 8.5 high | | | 2025-08-22 | [CVE-2025-52450](https://rewindex.com/cve/CVE-2025-52450.md) | | 6.5 medium | | | 2025-08-22 | [CVE-2025-26498](https://rewindex.com/cve/CVE-2025-26498.md) | | 7.3 high | | | 2025-08-22 | [CVE-2025-26497](https://rewindex.com/cve/CVE-2025-26497.md) | | 7.3 high | | | 2025-08-22 | [CVE-2025-26496](https://rewindex.com/cve/CVE-2025-26496.md) | | 9.3 critical | | | 2025-07-25 | [CVE-2025-52455](https://rewindex.com/cve/CVE-2025-52455.md) | | 5.3 medium | | | 2025-07-25 | [CVE-2025-52454](https://rewindex.com/cve/CVE-2025-52454.md) | | 8.2 high | | | 2025-07-25 | [CVE-2025-52453](https://rewindex.com/cve/CVE-2025-52453.md) | | 8.2 high | | | 2025-07-25 | [CVE-2025-52452](https://rewindex.com/cve/CVE-2025-52452.md) | | 8.5 high | | | 2025-07-25 | [CVE-2025-52449](https://rewindex.com/cve/CVE-2025-52449.md) | | 8.5 high | | | 2025-07-25 | [CVE-2025-52448](https://rewindex.com/cve/CVE-2025-52448.md) | | 8.1 high | | | 2025-07-25 | [CVE-2025-52447](https://rewindex.com/cve/CVE-2025-52447.md) | | 8.1 high | | | 2025-07-25 | [CVE-2025-52446](https://rewindex.com/cve/CVE-2025-52446.md) | | 8.0 high | | | 2025-06-10 | [CVE-2025-43699](https://rewindex.com/cve/CVE-2025-43699.md) | | 5.3 medium | | | 2025-06-10 | [CVE-2025-43698](https://rewindex.com/cve/CVE-2025-43698.md) | | 9.1 critical | | | 2025-06-10 | [CVE-2025-43697](https://rewindex.com/cve/CVE-2025-43697.md) | | 7.5 high | | | 2025-06-10 | [CVE-2025-43701](https://rewindex.com/cve/CVE-2025-43701.md) | | 7.5 high | | | 2025-06-10 | [CVE-2025-43700](https://rewindex.com/cve/CVE-2025-43700.md) | | 7.5 high | | | 2025-02-11 | [CVE-2025-26495](https://rewindex.com/cve/CVE-2025-26495.md) | Sensitive Data Exposure in Tableau Server | 7.5 high | | | 2025-02-11 | [CVE-2025-26494](https://rewindex.com/cve/CVE-2025-26494.md) | Server Side Request Forgery vulnerability in Tableau Server | 7.7 high | | --- _Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_ ## Charts ### Chart data: CVEs per week, last 52 weeks (Salesforce) Weeks start Monday, UTC. Bars: CVEs by published date (KEV date added if unpublished), by CVSS severity; kev_added: entries added to CISA KEV that week. Same filters as the list. The current week is partial. | Week of (UTC) | Critical | High | Medium | Low | Not scored | Added to KEV | | --- | --- | --- | --- | --- | --- | --- | | 2025-11-03 | 0 | 0 | 6 | 0 | 0 | 0 | | 2025-11-10 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-11-17 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-11-24 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-01 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-08 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-15 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-22 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-29 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-05 | 1 | 0 | 0 | 0 | 0 | 0 | | 2026-01-12 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-19 | 4 | 0 | 0 | 0 | 0 | 0 | | 2026-01-26 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-02 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-09 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-16 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-23 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-02 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-09 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-16 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-23 | 1 | 0 | 0 | 0 | 0 | 0 | | 2026-03-30 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-06 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-13 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-20 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-27 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-04 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-11 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-18 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-25 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-01 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-08 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-15 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-22 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-29 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-06 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-13 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-20 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-27 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-03 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-10 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-17 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-24 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-31 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-07 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-14 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-21 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-28 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-10-05 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-10-12 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-10-19 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-10-26 | 0 | 0 | 0 | 0 | 0 | 0 | --- Canonical: https://rewindex.com/company/salesforce/cves · Markdown: https://rewindex.com/company/salesforce/cves.md · JSON: https://rewindex.com/api/v1/companies/salesforce/cves · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:13:34.451Z