CVE-2025-43698 - AskarLabs CVE Database

CVE-2025-43698

Vendor Salesforce

Product OmniStudio

Weakness CWE-281

Published June 10, 2025

Last update June 11, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025

Key dates

02Disclosure timeline

June 10, 2025 CVE published

June 11, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-43698 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/281.html

Related vulnerabilities

04Related CVE

CVE-2023-2993 CVE-2025-24791 snowflake-connector-nodejs has incorrect validation of temporary credential cache file permissions CVE-2024-21816 Background task manager has an improper preservation of permissions vulnerability CVE-2024-46941 SystemUI component protection settings vulnerability CVE-2026-35361 uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems