Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-25236

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user acc

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Omnissa

Description

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Omnissa Omnissa Workspace ONE UEM

Default version status: unaffected

  • Omnissa Workspace ONE UEM version prior to 24.10.0.25affected
  • Omnissa Workspace ONE UEM version prior to 24.6.0.44affected
  • Omnissa Workspace ONE UEM version prior to 24.2.0.36affected

References