CVE-2025-43701 - AskarLabs CVE Database

CVE-2025-43701

Vendor Salesforce

Product OmniStudio

Weakness CWE-281

Published June 10, 2025

Last update June 10, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data. This impacts OmniStudio: before version 254.

Key dates

02Disclosure timeline

June 10, 2025 CVE published

June 10, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-43701 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/281.html