Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-25236
PUBLISHED
More InfoOfficial Page
Assigner-Omnissa
Assigner Org ID-de5a6978-88fe-4c27-a7df-d0d5b52d5b52
View Known Exploited Vulnerability (KEV) details
Published At-12 Nov, 2025 | 17:41
Updated At-12 Nov, 2025 | 21:04
Rejected At-
▼CVE Numbering Authority (CNA)

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks.

Affected Products
Vendor
Omnissa
Product
Omnissa Workspace ONE UEM
Default Status
unaffected
Versions
Affected
  • Omnissa Workspace ONE UEM version prior to 24.10.0.25
  • Omnissa Workspace ONE UEM version prior to 24.6.0.44
  • Omnissa Workspace ONE UEM version prior to 24.2.0.36
Problem Types
TypeCWE IDDescription
CWECWE-204CWE-204 Observable Discrepancy Response
Type: CWE
CWE ID: CWE-204
Description: CWE-204 Observable Discrepancy Response
Metrics
VersionBase scoreBase severityVector
3.15.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Version: 3.1
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-565CAPEC-565 Password Spraying
CAPEC-600CAPEC-600 Credential Stuffing
CAPEC-112CAPEC-112 Brute Force
CAPEC ID: CAPEC-565
Description: CAPEC-565 Password Spraying
CAPEC ID: CAPEC-600
Description: CAPEC-600 Credential Stuffing
CAPEC ID: CAPEC-112
Description: CAPEC-112 Brute Force
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://static.omnissa.com/sites/default/files/OMSA-2025-0005.pdf
N/A
https://www.omnissa.com/omnissa-security-response/
N/A
Hyperlink: https://static.omnissa.com/sites/default/files/OMSA-2025-0005.pdf
Resource: N/A
Hyperlink: https://www.omnissa.com/omnissa-security-response/
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Details not found