Salesforce mobile software development kit vulnerabilities

Latest Salesforce mobile software development kit CVEs

Newest publication first

1. CVE-2016-15012 forcedotcom SalesforceMobileSDK-Windows QuerySpec.cs ComputeCountSql sql injection

   Published 2023-01-07

   Critical·CVSS 9.8 EPSS 0.71%

   ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in forcedotcom SalesforceMobileSDK-Windows up to 4.x. It has been rated as critical. This issue affects the function ComputeCountSql of the file SalesforceSDK/SmartStore/Store/QuerySpec.cs. The manipulation leads to sql in...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.