Vendors / Omnissa Records 11 All Threatist records
Exploited (KEV) 1
CVSS critical 0
CVSS high 9
Exploited now Omnissa records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 92KEV
VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.99677 · Published 2021-12-17 · No fix listed CWE-918
Priority MEDIUM 60
Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.25147 · Published 2025-08-11 · No fix listed CWE-22
Priority LOW 37
Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal ne…
CVSS 3.1 HIGH 8.6· Network · No auth · No interaction · EPSS 0.00323 · Published 2025-08-11 · Fixed in 2.32 and later, 2503 and later CWE-918
Priority LOW 35
Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00183 · Published 2026-07-08 · No fix listed CWE-22
Priority LOW 35
Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00132 · Published 2026-06-09 · No fix listed CWE-22
Priority LOW 35
Omnissa Horizon Client for Windows contains an LPE Vulnerability.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00155 · Published 2025-04-16 · No fix listed CWE-269
Priority LOW 35
Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2025-02-04 · No fix listed CWE-276
Priority LOW 35
Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00188 · Published 2025-02-04 · No fix listed CWE-269
Priority LOW 33
Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0029 · Published 2025-04-17 · No fix listed CWE-942
Priority LOW 30
Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00261 · Published 2025-11-12 · No fix listed CWE-204
Priority LOW 24
Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00206 · Published 2025-08-11 · No fix listed CWE-918
Open these records in search → All records by CVSS severity
0 9 2 0 0
THREATIST.IORead the docs