{"id":"CVE-2025-25231","published":"2025-08-11T18:12:49Z","modified":"2025-08-11T18:26:45Z","title":"Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability","vendor":"Omnissa","product":"Omnissa Workspace ONE UEM","tier":"core","eol":null,"affectedVersions":[{"vendor":"Omnissa","product":"Omnissa Workspace ONE UEM","versions":["Omnissa Workspace ONE UEM version 24.10.0.10 or earlier","Omnissa Workspace ONE UEM version 24.6.0.34 or earlier","Omnissa Workspace ONE UEM version 24.2.0.29 or earlier","Omnissa Workspace ONE UEM version 23.10.0.49 or earlier"]}],"description":{"text":"Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.","provenance":"source","from":"CVE.org"},"summary":{"text":"Omnissa Workspace ONE UEM contains a secondary context path traversal flaw, classified as improper limitation of a pathname to a restricted directory. An attacker who can reach the product over the network, without authentication or user interaction, can send crafted read-only GET requests to restricted API endpoints and gain access to sensitive information.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T22:22:19Z"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.23456,"percentile":0.97792,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2025-09-09","exploitedFirstSeen":"2025-09-09","ransomware":false,"evidence":[{"url":"https://moje.cert.pl/komunikaty/2025/29/aktywnie-wykorzystywana-krytyczna-podatnosc-w-narzedziu-omnissa-workspace-one-uem-airwatch-mdm/","date":"2025-09-09"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2025-12-28&host_type=src&vulnerability=cve-2025-25231","date":"2025-12-28"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-01-18&host_type=src&vulnerability=cve-2025-25231","date":"2026-01-18"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-01-21&host_type=src&vulnerability=cve-2025-25231","date":"2026-01-21"},{"url":"https://tracker.crowdsec.net/cves/CVE-2025-25231","date":"2026-02-02"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-04&host_type=src&vulnerability=cve-2025-25231","date":"2026-02-04"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-08&host_type=src&vulnerability=cve-2025-25231","date":"2026-02-08"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-11&host_type=src&vulnerability=cve-2025-25231","date":"2026-02-11"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-12&host_type=src&vulnerability=cve-2025-25231","date":"2026-02-12"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-27&host_type=src&vulnerability=cve-2025-25231","date":"2026-02-27"}],"evidenceTotal":80,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory"}],"references":[{"url":"https://static.omnissa.com/sites/default/files/OMSA-2025-0004.pdf","tags":[]},{"url":"https://www.omnissa.com/omnissa-security-response/","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2025-24160","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24160","exploited":true,"exploitedSince":"2025-09-09","provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2025-25231","name":"Omnissa Workspace ONE UEM - Path Traversal","severity":"high","path":"http/cves/2025/CVE-2025-25231.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25231.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2025-08-11","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2025-25231","provenance":"source"},{"date":"2025-09-09","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://moje.cert.pl/komunikaty/2025/29/aktywnie-wykorzystywana-krytyczna-podatnosc-w-narzedziu-omnissa-workspace-one-uem-airwatch-mdm/","provenance":"source"},{"date":"2025-09-09","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24160","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":64.8,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 418 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.56,"detail":"percentile 0.9779"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.25,"detail":"base score 7.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}