{"advisories":[{"id":"EUVD-2025-24160","source":"euvd","title":"Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24160"}],"cve":"CVE-2025-25231","enrichment":{"created":"2025-08-12T11:46:59.548964+00:00","updated":"2025-08-12T11:46:59.549010+00:00","vendors":["omnissa","omnissa$PRODUCT$workspace_one"]},"epss":{"score":0.22294},"mitre":{"cpes":[],"created":"2025-08-11T18:12:49.711000+00:00","description":"Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cvssV4_0":{}},"mitre_repo_path":"cves/2025/25xxx/CVE-2025-25231.json","references":["https://static.omnissa.com/sites/default/files/OMSA-2025-0004.pdf","https://www.omnissa.com/omnissa-security-response/"],"title":null,"updated":"2025-08-11T18:26:45.876000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":[],"created":"2025-08-11T18:15:32.930000+00:00","description":"Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cvssV4_0":{}},"nvd_repo_path":"2025/CVE-2025-25231.json","references":["https://static.omnissa.com/sites/default/files/OMSA-2025-0004.pdf","https://www.omnissa.com/omnissa-security-response/"],"title":null,"updated":"2026-06-17T09:00:32.273000+00:00","vendors":[],"weaknesses":["CWE-22"]},"opencve":{"changes":[{"created":"2025-08-11T18:15:00+00:00","data":[{"details":{"new":"Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.","old":null},"type":"description"},{"details":{"added":["https://static.omnissa.com/sites/default/files/OMSA-2025-0004.pdf","https://www.omnissa.com/omnissa-security-response/"],"removed":[]},"type":"references"},{"details":{"added":{"cvssV3_1":{"score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"646becd7-a2f6-4077-942d-ef40e0546c23"},{"created":"2025-08-11T19:15:00+00:00","data":[{"details":{"added":["CWE-22"],"removed":[]},"type":"weaknesses"},{"details":{"added":{"ssvc":{"options":{"Automatable":"yes","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"1a6eada3-7e15-4e24-86a4-ed043d2c5f56"},{"created":"2025-08-12T12:15:00+00:00","data":[{"details":["omnissa","omnissa$PRODUCT$workspace_one"],"type":"first_time"},{"details":{"added":["omnissa","omnissa$PRODUCT$workspace_one"],"removed":[]},"type":"vendors"}],"id":"1c18ab43-29d6-4f6f-8d0c-6e99dcb9257a"}],"cpes":{"data":[],"providers":[]},"created":{"data":"2025-08-11T18:12:49.711000+00:00","provider":"mitre"},"description":{"data":"Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.22294},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"yes","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://static.omnissa.com/sites/default/files/OMSA-2025-0004.pdf","https://www.omnissa.com/omnissa-security-response/"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2026-04-15T00:35:42.020000+00:00","provider":"nvd"},"vendors":{"data":["omnissa","omnissa$PRODUCT$workspace_one"],"providers":["enrichment"]},"weaknesses":{"data":["CWE-22"],"providers":["nvd","vulnrichment"]}},"vulnrichment":{"cpes":[],"created":"2025-08-11T18:12:49.711000+00:00","description":"Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"yes","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"references":[],"title":null,"updated":"2025-08-11T18:26:13.286000+00:00","vendors":[],"vulnrichment_repo_path":"2025/25xxx/CVE-2025-25231.json","weaknesses":["CWE-22"]}}