What’s Vulnerable › Vulnerabilities

CVE-2025-25236

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-12 · updated 2026-10-18
• Weakness: CWE-204

Description

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks.

Affected products

• Omnissa Workspace ONE UEM: Omnissa Workspace ONE UEM version prior to 24.10.0.25, Omnissa Workspace ONE UEM version prior to 24.6.0.44, Omnissa Workspace ONE UEM version prior to 24.2.0.36

References

• https://static.omnissa.com/sites/default/files/OMSA-2025-0005.pdf
• https://www.omnissa.com/omnissa-security-response/

Get alerted when CVE-2025-25236 or the next vulnerability affects your stack