CVE-2025-25229

Published: Aug 11, 2025Modified: Aug 12, 2025

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: de5a6978-88fe-4c27-a7df-d0d5b52d5b52 (Secondary)

Description

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources.

Related CWEs

CWE-918

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (2)

https://www.omnissa.com/omnissa-security-response/

Source: de5a6978-88fe-4c27-a7df-d0d5b52d5b52

https://www.omnissa.com/omsa-2025-0004/

Source: de5a6978-88fe-4c27-a7df-d0d5b52d5b52

Timeline

No history available yet.