CVE-2026-34951

MEDIO 6.1CVE-2026-34951 · Published 06/04/2026 · updated 24/10/2026

In breve

CVE-2026-34951 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda workbench (salesforce).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.15%, superiore al 4.1% delle vulnerabilità.
Correzione: aggiornare a 65.0.0 o successiva.

Package	Affected versions	Patched versions
workbench salesforce	`< 65.0.0`	`65.0.0`

Description

Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains a reflected cross-site scripting vulnerability via the footerScripts parameter, which does not sanitize user-supplied input before rendering it in the page response. Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Workbench allows XSS Targeting Error Pages. This vulnerability is fixed in 65.0.0.

References

forceworkbench/forceworkbench security advisory · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free