← All advisories

Medium severity5.3NVD Advisory· Published Jun 10, 2025· Updated Apr 15, 2026

CVE-2025-43699

CVE-2025-43699

Description

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission check.

This impacts OmniStudio: before Spring 2025

Affected products

1

Salesforce/OmniStudiollm-fuzzy
Range: < Spring 2025

Patches

Vulnerability mechanics

References

1

help.salesforce.com/s/articleViewnvd

News mentions

0

No linked articles in our index yet.