OM
Product
OmniStudio
5
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add OmniStudio to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-43698 | 9.1 | Jun 10 | Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects Affected: before Spring 2025 |
| CVE-2025-43697 | 7.5 | Jun 10 | Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data Affected: before Spring 2025 |
| CVE-2025-43701 | 7.5 | Jun 10 | Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data. This impacts OmniStudio: before version 254 Affected: before Spring 2025 |
| CVE-2025-43700 | 7.5 | Jun 10 | Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025 Affected: through Spring 2025 |
| CVE-2025-43699 | 5.3 | Jun 10 | Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission check. This impacts OmniStudio: before… Affected: before Spring 2025 |
Showing 5