Vulnerabilities

TI-2025-28294 CVE-2025-43699 · GHSA-3hvp-qhfg-j3vj

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio…

LOW 30

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission check.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00421 Published 2025-06-10 Fixed in Spring 2025 CWE-602

TI-2025-28293 CVE-2025-43698 · GHSA-gqmw-jrgv-446q

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…

MEDIUM 48

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00491 Published 2025-06-10 Fixed in Spring 2025 CWE-281

TI-2025-28292 CVE-2025-43697 · GHSA-6236-fhhc-64mr

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper)…

LOW 39

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00447 Published 2025-06-10 Fixed in Spring 2025 CWE-281

TI-2025-28296 CVE-2025-43701 · GHSA-3429-h97r-hqqx

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…

LOW 39

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00447 Published 2025-06-10 Fixed in Spring 2025 CWE-281

Vulnerabilities

Filters

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio…

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper)…

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…