CVE-2025-25236CWE-204

CVE-2025-25236

Medium · published November 12, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00261 · 17.0th percentile
Weakness
CWE-204 · Observable Response Discrepancy
Published
2025-11-12T23:15Z
References (2)
https://static.omnissa.com/sites/default/files/OMSA-2025-0005.pdf · de5a6978-88fe-4c27-a7df-d0d5b52d5b52https://www.omnissa.com/omnissa-security-response/ · de5a6978-88fe-4c27-a7df-d0d5b52d5b52
EPSS history
Timeline
  • 12 NOV 17:41Z
    Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability
    cvelistv5