CVE-2025-25229 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources.

Reserved 2025-02-04 | Published 2025-08-11 | Updated 2025-08-11 | Assigner Omnissa

MEDIUM: 5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Product status

Default status

unaffected

Omnissa Workspace ONE UEM version 24.10.0.10 or earlier

affected

Omnissa Workspace ONE UEM version 24.6.0.34 or earlier

affected

Omnissa Workspace ONE UEM version 24.2.0.29 or earlier

affected

Omnissa Workspace ONE UEM version 23.10.0.49 or earlier

affected

Credits

Omnissa would like to thank Khristopher Tolbert of Maveris for reporting this issue to us. finder

References

www.omnissa.com/omsa-2025-0004/

www.omnissa.com/omnissa-security-response/

cve.org (CVE-2025-25229)

nvd.nist.gov (CVE-2025-25229)

Download JSON

https://cve.threatint.eu/CVE/CVE-2025-25229

Support options

Helpdesk Chat, Email, Knowledgebase