CVE Database
/

CVE-2026-2298

Back to search

CVE-2026-2298

Published: Mar 23, 2026

Modified: Apr 29, 2026

PUBLISHED

Description

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026.

VendorProductVersions

Salesforce

Marketing Cloud Engagement

affected
0 - < January 30th, 2026

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now