Observable Response Discrepancy in Omnissa Workspace ONE UEM
CVE-2025-25236
5.3MEDIUM
What is CVE-2025-25236?
Omnissa Workspace ONE UEM is affected by a vulnerability characterized by an observable response discrepancy, allowing potential attackers to enumerate sensitive information, including tenant IDs and user accounts. This weakness may enable various attack vectors, such as brute-force, password-spraying, and credential-stuffing attacks, jeopardizing the security of user data and organizational integrity.
Affected Version(s)
Omnissa Workspace ONE UEM Omnissa Workspace ONE UEM version prior to 24.10.0.25
Omnissa Workspace ONE UEM Omnissa Workspace ONE UEM version prior to 24.10.0.25
Omnissa Workspace ONE UEM Omnissa Workspace ONE UEM version prior to 24.6.0.44