NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2025-43700

CVSS 3.1: 7.5 high
EPSS: <1%p35
Published: Jun 10, 2025 · Jun 10, 2025
Modified: Jun 17, 2026

Analyze CVE-2025-43700 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025.

Weakness: CWE-281

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

3 stories

⚡ Weekly Recap: iPhone Spyware, Microsoft 0-Day, TokenBreak Hack, AI Data Leaks and More

The Hacker NewsOct 28, 08:29 UTC · Oct 28, 2025MalwareExploitedCVE-2025-43200 CVE-2025-32711 CVE-2025-33053+243

60

Researchers Uncover 20+ Configuration Risks, Including Five CVEs, in Salesforce Industry Cloud

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2025Exploit / PoCCVE-2025-43697 CVE-2025-43698 CVE-2025-43699+31

60

Researcher Finds Five Zero-Days and 20 Misconfigurations in Salesforce

Infosecurity MagazineJun 11, 11:30 UTC · Jun 11, 2025Exploit / PoCCVE-2025-4399 CVE-2025-43700 CVE-2025-43701+21

60