IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-01-24 01:15

MODIFIED

2026-01-24 01:15

EPSS (Prob. Exploit)

0.65%

Top 48.7%

DATA SOURCES:

NVD 🔗 2026-01-24 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08

> DESCRIPTION

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-88

> CWE DETAILED DESCRIPTIONS

CWE-88: Improper Neutralization of Argument Delimiters in a Command - The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

> HISTORIQUE DES MODIFICATIONS

Première apparition

24/01/2026 01:15

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:58

CWE

Champ modifié: Description CWE

Ancienne valeur:

CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') - The product constructs a string for a command to be executed by a separate component in another control sph...

Nouvelle valeur:

📊 ENRICHISSEMENT 01/02/2026 06:45

CWE