← Database

CVE-2025-43698

CRITICAL CVSS: 9.1 Published: 2025-06-10 Modified: 2026-06-17

Description

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025

Affected Platforms

Unknown

Weakness Type

CWE-281

References