CVE-2026-2298 in Salesforce Marketing Cloud Engagement
Résumé (Anglaise)
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026.
Responsable
Salesforce
Réserver
10/02/2026
Divulgation
23/03/2026
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 352588 | Salesforce Marketing Cloud Engagement Web Services Protocol élévation de privilèges | 88 | Non défini | Correctif officiel | CVE-2026-2298 |