CVE-2025-43698

A vulnerability in Salesforce OmniStudio (FlexCards) allows for the bypass of field-level security controls when fetching data from Salesforce objects. The root cause is that the SOQL data source fails to enforce these security restrictions. This affects versions prior to Spring 2025 . Attackers ...

CVE-2025-43698

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025...

CVE-2025-43697

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio DataMapper allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025...

CVE-2025-43697

A configuration-related Improper Preservation of Permissions vulnerability exists in Salesforce OmniStudio (DataMapper) , impacting versions prior to Spring 2025. The root cause is that if 'Check Field Level Security' is not enabled for 'Extract' and 'Turbo Extract Data Mappers' , the 'View Encry...

CVE-2025-43697

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio DataMapper allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025...

CVE-2025-43701

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows exposure of Custom Settings data. This impacts OmniStudio: before version 254...

CVE-2025-43701

A security vulnerability exists in Salesforce OmniStudio (FlexCards) versions prior to 254 due to an Improper Preservation of Permissions issue. This flaw allows Guest Users to access values for Custom Settings data, potentially exposing sensitive information. While the vulnerability stems from a...

CVE-2025-43701

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows exposure of Custom Settings data. This impacts OmniStudio: before version 254...

CVE-2025-43700

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025...

CVE-2025-43700

A configuration-related Improper Preservation of Permissions vulnerability exists in Salesforce OmniStudio (FlexCards) , impacting versions prior to Spring 2025 . The root cause is that FlexCards does not enforce the 'View Encrypted Data' permission, which can lead to the exposure of plaintext va...

CVE-2025-43700

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025...

Salesforce OmniStudio 安全漏洞

Salesforce OmniStudio is a digitization platform from US-based Salesforce, Inc. A security vulnerability exists in versions of Salesforce OmniStudio prior to 2025, which stems from an improper privilege retention issue that could lead to the disclosure of encrypted data...

Salesforce OmniStudio 安全漏洞

Salesforce OmniStudio is a digitization platform from US-based Salesforce, Inc. A security vulnerability exists in versions prior to Salesforce OmniStudio 254, which stems from an improper privilege retention issue that could lead to a data leak of customized settings...

Salesforce OmniStudio 安全漏洞

Salesforce OmniStudio is a digitization platform from US-based Salesforce, Inc. A security vulnerability exists in versions prior to Salesforce OmniStudio Spring 2025 that stems from an improper privilege retention issue that could lead to the bypass of OmniUICard object security controls...

Salesforce OmniStudio 安全漏洞

Salesforce OmniStudio is a digitization platform from US-based Salesforce, Inc. A security vulnerability exists in Salesforce OmniStudio versions prior to 2025 that stems from an improper privilege retention issue that could lead to field-level security control bypass...

Salesforce OmniStudio 安全漏洞

Salesforce OmniStudio is a digitization platform from US-based Salesforce, Inc. A security vulnerability exists in versions of Salesforce OmniStudio prior to 2025, which stems from an improper privilege retention issue that could lead to the disclosure of encrypted data...

CVE-2025-43701: Improper Preservation of Permissions

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows exposure of Custom Settings data. This impacts OmniStudio: before version 254...

CVE-2025-43700: Improper Preservation of Permissions

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025...

CVE-2025-43699: Client-Side Enforcement of Server-Side Security

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio FlexCards allows bypass of required permission check. This impacts OmniStudio: before Spring 2025...

CVE-2025-43698: Improper Preservation of Permissions

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025...