HighCVSS 7.8
EPSS 0.18%
Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability.
Vendor
Omnissa vulnerabilities
10 published CVES affecting Omnissa, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 10
- Critical
- 0
- High
- 8
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- Omnissa Workspace ONE UEM 3
- Omnissa Horizon Client for MacOS 2
- Omnissa Horizon Client for Windows 1
- Omnissa Unified Access Gateway (UAG) 1
- Omnissa Workspace ONE® Assist for macOS 1
- Omnissa Workspace ONE® Tunnel for Windows 1
- Secure Email Gateway 1
- unified access gateway 1
- workspace one tunnel 1
Latest Omnissa CVEs
Newest publication first
-
-
HighCVSS 7.8 EPSS 0.13%
Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability.
-
MediumCVSS 5.3 EPSS 0.26%
Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks.
-
HighCVSS 8.6 EPSS 0.35%
Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks.
-
MediumCVSS 5.4 EPSS 0.22%
Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources.
-
HighCVSS 7.5 EPSS 29.1%
Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.
-
HighCVSS 7.5 EPSS 0.30%
Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS restrictions to gain access to sensitive networks.
-
HighCVSS 7.8 EPSS 0.16%
Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Client for Windows is installed may be able to elevate privileges.
-
HighCVSS 7.8 EPSS 0.17%
Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizo...
-
HighCVSS 7.8 EPSS 0.19%
Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.