CVE-2025-43701

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data.  This impacts OmniStudio: before version 254.

Score

CVSS 3.1 7.5 High

Status

Deferred - security@salesforce.com

Published

2025-06-10

Last modified

2025-06-10

Weaknesses

CWE-281

Affected products

• Omnistudio (Salesforce)

References

• https://help.salesforce.com/s/articleView?id=004980323&type=1