« Volver al listado

CVE-2025-25229

Estado: AplazadaMedia (5.4)—

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Omnissa — Workspace ONE UEMAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-25229",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-25229",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-08-11T18:40:49.393943Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52",
      "affectedData": [
        {
          "vendor": "Omnissa",
          "product": "Omnissa Workspace ONE UEM",
          "versions": [
            {
              "status": "affected",
              "version": "Omnissa Workspace ONE UEM version 24.10.0.10 or earlier"
            },
            {
              "status": "affected",
              "version": "Omnissa Workspace ONE UEM version 24.6.0.34 or earlier"
            },
            {
              "status": "affected",
              "version": "Omnissa Workspace ONE UEM version 24.2.0.29 or earlier"
            },
            {
              "status": "affected",
              "version": "Omnissa Workspace ONE UEM version 23.10.0.49 or earlier"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-08-11T19:15:26.550",
  "references": [
    {
      "url": "https://www.omnissa.com/omnissa-security-response/",
      "source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52"
    },
    {
      "url": "https://www.omnissa.com/omsa-2025-0004/",
      "source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-918"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources."
    },
    {
      "lang": "es",
      "value": "Omnissa Workspace ONE UEM contiene una vulnerabilidad de Server-Side Request Forgery (SSRF). Un atacante con privilegios de usuario podría acceder a información interna restringida del sistema, lo que podría permitir la enumeración de recursos internos de la red."
    }
  ],
  "lastModified": "2026-06-17T09:00:32.063",
  "sourceIdentifier": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52"
}