https://vulnogram.org/ Most recent CVEs assigned by Omnissa, LLC (omnissa). https://vulnogram.org/seaview/icons/omnissa.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-22927 https://vulnogram.org/CVE-2026-22927 Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability. High Wed, 08 Jul 2026 13:37:24 GMT https://vulnogram.org/CVE-2026-22926 https://vulnogram.org/CVE-2026-22926 Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability. High Tue, 09 Jun 2026 16:34:24 GMT https://vulnogram.org/CVE-2025-25236 https://vulnogram.org/CVE-2025-25236 Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credenti… Medium Network Exploitable Wed, 12 Nov 2025 17:41:57 GMT https://vulnogram.org/CVE-2025-25235 https://vulnogram.org/CVE-2025-25235 Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks. High Network Exploitable Mon, 11 Aug 2025 21:47:25 GMT https://vulnogram.org/CVE-2025-25229 https://vulnogram.org/CVE-2025-25229 Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources… Medium Mon, 11 Aug 2025 18:24:17 GMT https://vulnogram.org/CVE-2025-25231 https://vulnogram.org/CVE-2025-25231 Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints. High Network Exploitable Mon, 11 Aug 2025 18:12:49 GMT https://vulnogram.org/CVE-2025-25234 https://vulnogram.org/CVE-2025-25234 Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS restrictions to gain access to sensitive networks. High Network Exploitable Thu, 17 Apr 2025 14:58:36 GMT https://vulnogram.org/CVE-2025-25230 https://vulnogram.org/CVE-2025-25230 Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Client for Windows is installed may be able to elevate privileges. High Wed, 16 Apr 2025 21:29:50 GMT https://vulnogram.org/CVE-2024-11468 https://vulnogram.org/CVE-2024-11468 Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root… High Tue, 04 Feb 2025 22:17:33 GMT https://vulnogram.org/CVE-2024-11467 https://vulnogram.org/CVE-2024-11467 Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where th… High Tue, 04 Feb 2025 22:12:39 GMT