PT-2025-22120 · Salesforce · Omnis Studio

CVE-2025-43700 · Publicado 2025-05-20 · Atualizado 2025-06-11

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Salesforce OmniStudio versions prior to Spring 2025

Description The issue is related to an Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards), which allows exposure of encrypted data.

Recommendations For Salesforce OmniStudio versions prior to Spring 2025, update to a version released after Spring 2025 to resolve the issue.

Correção

Improper Preservation of Permissions

Enumeração de Fraquezas

CWE-281

Identificadores relacionados

CVE-2025-43700

Produtos afetados

Omnis Studio

Referências · 8

• https://t.me/cvetracker/25906 · Publicação no Telegram
• https://help.salesforce.com/s/articleView?id=004980323&type=1 · Nota
• https://t.me/latest_high_impact_cve/2602 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1932541016860402105 · Publicação no Twitter
• https://twitter.com/securityRSS/status/1932869469895860278 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1932399821136015691 · Publicação no Twitter
• https://reddit.com/r/salesforce/comments/1kqs14d/omni_security_notification_potential_data · Publicação no Reddit
• https://nvd.nist.gov/vuln/detail/CVE-2025-43700 · Nota de Segurança