Home

Description

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources.

PUBLISHED Reserved 2025-02-04 | Published 2025-08-11 | Updated 2025-08-11 | Assigner Omnissa




MEDIUM: 5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Product status

Default status
unaffected

Omnissa Workspace ONE UEM version 24.10.0.10 or earlier
affected

Omnissa Workspace ONE UEM version 24.6.0.34 or earlier
affected

Omnissa Workspace ONE UEM version 24.2.0.29 or earlier
affected

Omnissa Workspace ONE UEM version 23.10.0.49 or earlier
affected

Credits

Omnissa would like to thank Khristopher Tolbert of Maveris for reporting this issue to us. finder

References

www.omnissa.com/omsa-2025-0004/

www.omnissa.com/omnissa-security-response/

cve.org (CVE-2025-25229)

nvd.nist.gov (CVE-2025-25229)

Download JSON