CVE-2025-43699: Salesforce Omnistudio

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission check.  This impacts OmniStudio: before Spring 2025

Affected products

• Salesforce Omnistudio

Published 2025-06-10. Last modified 2026-06-17.