Gainsight
Security Risk Profile
33
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
đź“… Data spans from November 20, 2025 to present
6
Total CVEs
0
Critical+High
1
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
5.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
33/100
low
⚠️ 1 Active Exploits
Severity Distribution
Critical
0High
0Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
1
Most Affected Products
1. Gainsight Assist2
2. Salesforce CRM2
3. Salesforce Salesforce2
4. Gainsight Gainsight2
5. Gainsight Gainsight Assist1
Recent Vulnerabilities
See more →CVE-2026-31382
CVSS 6.1medium
Gainsight Assist reflected XSS/HTML injection
3/20/2026🔧 No Patch
CVE-2026-31381
CVSS 5.3medium
Gainsight Assist plugin information disclosure
3/20/2026🔧 No Patch
https://www.theregister.com/2025/11/26/gainsight_ceos_handful_customers_data_stolen/
unknown
Gainsight CEO downplays breach, says only a 'handful' of customers had data stolen
11/26/2025🔧 No Patch
https://www.theregister.com/2025/11/21/shinyhunters_salesforce_gainsight_breach/
unknown
ShinyHunters 'does not like Salesforce at all'
11/21/2025⚠Exploited🔧 No Patch
https://www.theregister.com/2025/11/20/salesforce_gainsight_breach/
unknown
Salesforce-linked data breach claims 200+ victims, has ShinyHunters’ fingerprints all over it
11/20/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/salesforce-investigates-customer-data-theft-via-gainsight-breach/
unknown
Salesforce investigates customer data theft via Gainsight breach
11/20/2025🔧 No Patch
Monitor Gainsight in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.