CVE-2025-43697 - AskarLabs CVE Database

CVE-2025-43697

Vendor Salesforce

Product OmniStudio

Weakness CWE-281

Published June 10, 2025

Last update June 11, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025

Key dates

02Disclosure timeline

June 10, 2025 CVE published

June 11, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-43697 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/281.html

Related vulnerabilities

04Related CVE

CVE-2025-24791 snowflake-connector-nodejs has incorrect validation of temporary credential cache file permissions CVE-2022-31096 Invites restricted to an email or invite links restricted to an email domain may be bypassed by a under certain conditions in Discourse CVE-2024-46941 SystemUI component protection settings vulnerability CVE-2024-56317 CVE-2024-22114 System Information Widget in Global View Dashboard exposes information about Hosts to Users without Permission