Skip to content
OpenAdvisories
High · 7.5 CVE-2025-43701 EUVD-2025-17661GHSA-3429-h97r-hqqx

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data.  This impa…

Published Jun 10, 2025 · Updated Jun 10, 2025 · Assigned by Salesforce

Vendor: Salesforce Product: OmniStudio

Description

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data. 

This impacts OmniStudio: before version 254.

Affected products

VendorProductAffectedFixed
Salesforce OmniStudio < Spring 2025 Spring 2025

References