OOmnissa

Products

Exploited and recent CVEs

• CVE-2026-22927 High 7.8 Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability. 0.2%
• CVE-2026-22926 High 7.8 Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability. 0.1%
• CVE-2025-25236 Medium 5.3 Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could fac 0.3%
• CVE-2025-25235 High 8.6 Omnissa Secure Email Gateway (SEG) updates address Server-Side Request Forgery (SSRF) vulnerability 0.3%
• CVE-2025-25229 Medium 5.4 Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially 0.2%
• CVE-2025-25231 High 7.5 Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) t 25.1%
• CVE-2025-25234 High 7.1 Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS restrictions to gain 0.3%
• CVE-2025-25230 High 7.8 Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Client for Windows is installed may be able to elevate privileges. 0.2%
• CVE-2024-11468 High 7.8 Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with use 0.2%
• CVE-2024-11467 High 7.8 Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw. Successful exploitation of this issue may allow attackers with user privileges to escala 0.2%