CVE-2025-25229: Omnissa Workspace One UEM

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources.

Affected products

• Omnissa Omnissa Workspace One UEM: up to and including 24.10.0.10; up to and including 24.6.0.34; up to and including 24.2.0.29; up to and including 23.10.0.49

Published 2025-08-11. Last modified 2026-06-17.