Vulnerabilities

TI-2026-18412 CVE-2026-22927 · GHSA-7c7j-678j-gcch

Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability.

LOW 35

Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00183 Published 2026-07-08 No fix listed CWE-22

TI-2026-18411 CVE-2026-22926 · GHSA-vw2h-9c9h-52c3

Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability.

LOW 35

Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00132 Published 2026-06-09 No fix listed CWE-22

TI-2025-18902 CVE-2025-25236 · GHSA-hxj8-jjxp-p43w

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability.

LOW 30

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00261 Published 2025-11-12 No fix listed CWE-204

TI-2025-18901 CVE-2025-25235 · GHSA-pgr9-w2r6-xp6r

Omnissa Secure Email Gateway (SEG) updates address Server-Side Request Forgery (SSRF) vulnerability

LOW 37

Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal ne…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00323 Published 2025-08-11 Fixed in 2.32 and later, 2503 and later CWE-918

TI-2025-18897 CVE-2025-25229 · GHSA-hx6p-ccc3-cf73

Server-side request forgery in Omnissa Workspace ONE UEM

LOW 24

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00206 Published 2025-08-11 No fix listed CWE-918

TI-2025-18899 CVE-2025-25231 · GHSA-6489-j79m-95x8

Path traversal in Omnissa Workspace ONE UEM

MEDIUM 60

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.25147 Published 2025-08-11 No fix listed CWE-22

TI-2025-18900 CVE-2025-25234 · GHSA-7hqv-m3mr-cv2v

Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability.

LOW 33

Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0029 Published 2025-04-17 No fix listed CWE-942

TI-2025-18898 CVE-2025-25230 · GHSA-x2pf-6jgf-xvvw

Improper privilege management in Omnissa Horizon Client for Windows

LOW 35

Omnissa Horizon Client for Windows contains an LPE Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00155 Published 2025-04-16 No fix listed CWE-269

TI-2024-10629 CVE-2024-11468 · GHSA-9m2c-r2hc-7gcr

Incorrect default permissions in Omnissa Horizon Client for MacOS

LOW 35

Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00169 Published 2025-02-04 No fix listed CWE-276

TI-2024-10628 CVE-2024-11467 · GHSA-m4hr-g8rp-8xv4

Improper privilege management in Omnissa Horizon Client for MacOS

LOW 35

Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00188 Published 2025-02-04 No fix listed CWE-269

TI-2021-05093 CVE-2021-22054 · GHSA-xqxh-cq77-r6qh

Server-side request forgery in VMware Workspace ONE UEM console

CRITICAL 92KEV

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99677 Published 2021-12-17 No fix listed CWE-918

Vulnerabilities

Filters