Path Traversal Vulnerability in Omnissa Workspace ONE UEM

CVE-2025-25231

What is CVE-2025-25231?

Omnissa Workspace ONE UEM is susceptible to a Secondary Context Path Traversal vulnerability, allowing malicious actors to exploit the system. By sending specifically crafted read-only GET requests to certain restricted API endpoints, an attacker may gain unauthorized access to sensitive information, potentially affecting the privacy and security of users. It is crucial for organizations utilizing this software to take proactive measures to mitigate the risk and ensure that their data remains secure.

References