CVE-2025-43699: Client-Side Enforcement of Server-Side Security

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio FlexCards allows bypass of required permission check. This impacts OmniStudio: before Spring 2025...

CVE-2025-43698: Improper Preservation of Permissions

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025...