CVE-2025-25229: Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted…

PriorityP430medium5.4CVSS 3.1

AVNACLPRLUINSUCLILAN

EPSS

0.18%

7.6th percentile

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
omnissa	omnissa_workspace_one_uem	—	—
omnissa	omnissa_workspace_one_uem	—	—
omnissa	omnissa_workspace_one_uem	—	—
omnissa	omnissa_workspace_one_uem	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.