Omnissa
10 CVEs across 9 Omnissa products. Browse Omnissa vulnerabilities, severities, and proof-of-concept exploits.
Omnissa products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-22927 | High | 7.8 | 2026-07-08 | Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability. |
CVE-2026-22926 | High | 7.8 | 2026-06-09 | Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability. |
CVE-2025-25236 | Medium | 5.3 | 2025-11-12 | Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as t… |
CVE-2025-25235 | High | 8.6 | 2025-08-11 | Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows ro… |
CVE-2025-25229 | Medium | 5.4 | 2025-08-11 | Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted… |
CVE-2025-25231 | High | 7.5 | 2025-08-11 | Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by s… |
CVE-2025-25234 | High | 7.1 | 2025-04-17 | Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administra… |
CVE-2025-25230 | High | 7.8 | 2025-04-16 | Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Client for Windows is installed may be able… |
CVE-2024-11468 | High | 7.8 | 2025-02-04 | Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation o… |
CVE-2024-11467 | High | 7.8 | 2025-02-04 | Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw. Successful exploitation of this issue may allow… |