Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Salesforce

Salesforce OmniStudio vulnerabilities

5 published CVEs name Salesforce OmniStudio among the affected products.

Published CVEs
5
Last 12 months
0
Critical
1
Known exploited
0

Critical 1High 3Medium 1Low 0Not scored 0

Newest CVEs

  • CVE-2025-43699

    Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission check. This impacts…

    Salesforce · OmniStudio

    Medium5.3
  • CVE-2025-43698

    Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects.…

    Salesforce · OmniStudio

    Critical9.1
  • CVE-2025-43697

    Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data. This impacts OmniStudio: before…

    Salesforce · OmniStudio

    High7.5
  • CVE-2025-43701

    Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data. This impacts OmniStudio:…

    Salesforce · OmniStudio

    High7.5
  • CVE-2025-43700

    Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of encrypted data. This impacts OmniStudio: before…

    Salesforce · OmniStudio

    High7.5

Most common weaknesses

  1. CWE-281 4
  2. CWE-602 1