Salesforce Agentforce Vibes — known CVE vulnerabilities

Every CVE whose affected-product data names Salesforce Agentforce Vibes, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-64320 — CVSS 6.5 (medium): Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This…
• CVE-2025-64321 — CVSS 5.3 (medium): Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating…
• CVE-2025-64322 — CVSS 5.3 (medium): Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable…