CVE-2025-43698: Critical severity Salesforce OmniStudio vulnerability
Published Jun 10, 2025
·Updated
Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025
Affected Software
1 affected component
Salesforce OmniStudio<Spring 2025
Event History
Jun 10, 2025
CVE Published
via MITRE·11:33 AM
Data Sourced
via MITRE·11:33 AM
DescriptionWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-43698?
CVE-2025-43698 is rated as a critical vulnerability due to its potential to bypass field level security controls.
2
How do I fix CVE-2025-43698?
To fix CVE-2025-43698, ensure your Salesforce OmniStudio is updated to a version released after Spring 2025.
3
What impacts does CVE-2025-43698 have on Salesforce objects?
CVE-2025-43698 allows unauthorized access by bypassing field level security, potentially exposing sensitive data.
4
Who is affected by CVE-2025-43698?
Anyone using Salesforce OmniStudio versions before Spring 2025 is affected by CVE-2025-43698.
5
Is CVE-2025-43698 specific to any features within Salesforce OmniStudio?
Yes, CVE-2025-43698 specifically affects the FlexCards feature within Salesforce OmniStudio.