CVE-2025-25229

MEDIUM

Omnissa Workspace ONE UEM < 24.10.0.10, < 24.6.0.34, < 24.2.0.29, < 23.10.0.49 - Server-Side Request Forgery

Title source: llm

Description

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources.

References (2)

Core 2

Core References

Various Sources

https://www.omnissa.com/omnissa-security-response/

Various Sources

https://www.omnissa.com/omsa-2025-0004/

Scores

CVSS v3 5.4

EPSS 0.0018

EPSS Percentile 7.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-918

Status published

Products (4)

Omnissa/Omnissa Workspace ONE UEM Omnissa Workspace ONE UEM version 23.10.0.49 or earlier

Omnissa/Omnissa Workspace ONE UEM Omnissa Workspace ONE UEM version 24.10.0.10 or earlier

Omnissa/Omnissa Workspace ONE UEM Omnissa Workspace ONE UEM version 24.2.0.29 or earlier

Omnissa/Omnissa Workspace ONE UEM Omnissa Workspace ONE UEM version 24.6.0.34 or earlier

Published Aug 11, 2025

Tracked Since Feb 18, 2026