CVE-2025-25231Active Exploitation

MEDIUMCVSS 7.5 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch affected systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-22

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Active Exploitation

1100.0%

Referenced assets1 URL

By indicator

https://hubs.li/Q045HXsK0

Full discourse1 post

Picus Security@PicusSecurity211d
Active Exploitation
🚨 CVE-2025-25231 in #Omnissa Workspace One UEM allows unauthenticated path traversal leading to RCE. Attackers abuse the packageId parameter to bypass auth, steal admin lists, and drop webshells. Read the analysis & patch now: https://hubs.li/Q045HXsK0 https://t.co/auP87Tuu7r
Post summary
CVE-2025-25231 enables unauthenticated path traversal and RCE in Omnissa Workspace One UEM, with attackers actively exploiting it to drop webshells; a patch is available.
00011273
2.9K followersView on X

Explore more

Back to dashboard