PT-2025-32561 · Omnissa · Workspace One Uem

Published

2025-08-11

·

Updated

2026-03-13

·

CVE-2025-25231

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Omnissa Workspace ONE UEM (affected versions not specified)
Description Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints. The Security Research team discovered a chain to Remote Code Execution (RCE) on instances in the wild.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-25231

Affected Products

Workspace One Uem