OmniStudio vulnerabilities

4 known vulnerabilities in OmniStudio from Salesforce. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  OmniStudio: Improper Preservation of Permissions

  CVE-2025-43701Jun 10, 2025Salesforce

  Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data. This impacts OmniStudio: before version 254.

• 7.5 High severity

  OmniStudio: Improper Preservation of Permissions

  CVE-2025-43700Jun 10, 2025Salesforce

  Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025.

• 9.1 Critical severity

  OmniStudio: Improper Preservation of Permissions

  CVE-2025-43698Jun 10, 2025Salesforce

  Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025

• 7.5 High severity

  OmniStudio: Improper Preservation of Permissions

  CVE-2025-43697Jun 10, 2025Salesforce

  Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025