CVE-2025-43699

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio FlexCards allows bypass of required permission check. This impacts OmniStudio: before Spring 2025...

CVE-2025-43697

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio DataMapper allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025...

CVE-2025-43700

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025...

CVE-2025-43701

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows exposure of Custom Settings data. This impacts OmniStudio: before version 254...

CVE-2025-43699

A Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows for the bypass of required permission checks. This issue specifically impacts versions before Spring 2025 due to a failure to enforce the 'Required Permissions' field for the OmniUICard obj...

CVE-2025-43699

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio FlexCards allows bypass of required permission check. This impacts OmniStudio: before Spring 2025...

CVE-2025-43699

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio FlexCards allows bypass of required permission check. This impacts OmniStudio: before Spring 2025...

CVE-2025-43698

A vulnerability in Salesforce OmniStudio (FlexCards) allows for the bypass of field-level security controls when fetching data from Salesforce objects. The root cause is that the SOQL data source fails to enforce these security restrictions. This affects versions prior to Spring 2025 . Attackers ...

CVE-2025-43698

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025...

CVE-2025-43698

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025...

CVE-2025-43697

A configuration-related Improper Preservation of Permissions vulnerability exists in Salesforce OmniStudio (DataMapper) , impacting versions prior to Spring 2025. The root cause is that if 'Check Field Level Security' is not enabled for 'Extract' and 'Turbo Extract Data Mappers' , the 'View Encry...

CVE-2025-43697

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio DataMapper allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025...

CVE-2025-43697

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio DataMapper allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025...

CVE-2025-43701

A security vulnerability exists in Salesforce OmniStudio (FlexCards) versions prior to 254 due to an Improper Preservation of Permissions issue. This flaw allows Guest Users to access values for Custom Settings data, potentially exposing sensitive information. While the vulnerability stems from a...

CVE-2025-43701

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows exposure of Custom Settings data. This impacts OmniStudio: before version 254...

CVE-2025-43701

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows exposure of Custom Settings data. This impacts OmniStudio: before version 254...

CVE-2025-43700

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025...

CVE-2025-43700

A configuration-related Improper Preservation of Permissions vulnerability exists in Salesforce OmniStudio (FlexCards) , impacting versions prior to Spring 2025 . The root cause is that FlexCards does not enforce the 'View Encrypted Data' permission, which can lead to the exposure of plaintext va...

CVE-2025-43700

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025...

Salesforce OmniStudio 安全漏洞

Salesforce OmniStudio is a digitization platform from US-based Salesforce, Inc. A security vulnerability exists in versions of Salesforce OmniStudio prior to 2025, which stems from an improper privilege retention issue that could lead to the disclosure of encrypted data...