CVE-2025-43697: High severity Salesforce OmniStudio vulnerability
Published Jun 10, 2025
·Updated
Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025
Affected Software
1 affected component
Salesforce OmniStudio<Spring 2025
Event History
Jun 10, 2025
CVE Published
via MITRE·11:28 AM
Data Sourced
via MITRE·11:28 AM
DescriptionWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-43697?
CVE-2025-43697 is classified as a moderate severity vulnerability due to its potential impact on data exposure.
2
How do I fix CVE-2025-43697?
To mitigate CVE-2025-43697, ensure you update Salesforce OmniStudio to a version released after Spring 2025.
3
What kind of data is exposed due to CVE-2025-43697?
CVE-2025-43697 allows for the exposure of sensitive encrypted data due to improper preservation of permissions.
4
Which versions of Salesforce OmniStudio are affected by CVE-2025-43697?
CVE-2025-43697 affects Salesforce OmniStudio versions prior to Spring 2025.
5
What should organizations do to protect against CVE-2025-43697?
Organizations should promptly apply security updates and review permissions settings in Salesforce OmniStudio to mitigate CVE-2025-43697.