CVE-2021-22054

CVE-2021-22054 Generate SSRF payloads References https://blog.assetnote.io/2022/04/27/advisory-vmware-workspace-one-uem/ https://blog.assetnote.io/2022/04/27/vmware-workspace-one-uem-ssrf/ Examples generate POC python3 ssrf.py --url https://target.com --url https://example.com --airwatch python3...

CVE-CVE-2025-25231

CVE-2025-25231 Nuclei Template This template is written for the Nuclei tool to detect the CVE-2025-25231 Secondary Path Traversal vulnerability in the Omnissa Workspace ONE UEM product. Vulnerability Description CVE-2025-25231 is a Path Traversal vulnerability that allows an attacker to access...

VMware Workspace ONE UEM Airwatch Self-Service Portal - Detect

VMware Workspace ONE UEM Airwatch Self-Service Portal SSP login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware Workspace ONE UEM Airwatch Self-Service Portal SSP login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

VMware Workspace ONE UEM Airwatch Login Panel - Detect

VMware Workspace ONE UEM Airwatch login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware Workspace ONE UEM Airwatch login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

VMWare Workspace ONE UEM - Server-Side Request Forgery Detection

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain a server-side request forgery vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without...

CVE-2025-25236

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks...

CVE-2025-25236

Omnissa Workspace ONE UEM (affected families: 24.2.x before 24.2.0.36, 24.6.x before 24.6.0.44, or 24.10.x before 24.10.0.25) contains an observable response discrepancy vulnerability (CVE-2025-25236). The issue may allow enumeration of sensitive data such as tenant IDs and user accounts, enablin...

CVE-2025-25236: Observable Response Discrepancy

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks...

PT-2025-46681

Name of the Vulnerable Software and Affected Versions Omnissa Workspace ONE UEM affected versions not specified Description A discrepancy in observable responses exists in Omnissa Workspace ONE UEM. This could allow a malicious actor to enumerate sensitive information, including tenant ID and use...

Vulnerabilities fixed in Omnissa Workspace ONE UEM

Omnissa has fixed vulnerabilities in Omnissa Workspace ONE UEM. The vulnerabilities are located in the API endpoints of Omnissa Workspace ONE UEM. The first vulnerability allows malicious parties to gain unauthorized access to sensitive information using the Path Traversal technique. This can lea...

CVE-2025-25229

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery SSRF Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources...

Exploit for CVE-2025-25231

CVE-2025-25231 Nuclei Template این تمپلیت برای ابزار Nuclei...

CVE-2025-25231

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests read-only to restricted API endpoints...

CVE-2025-25229: Server-Side Request Forgery (SSRF)

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery SSRF Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources...

CVE-2025-25231: Improper Limitation of a Pathname to a Restricted Directory

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests read-only to restricted API endpoints...

VulnCheck KEV: CVE-2021-22054

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to...

CVE-2024-22260

VMware Workspace One UEM update addresses an information exposure vulnerability. A malicious actor with network access to the Workspace One UEM may be able to perform an attack resulting in an information exposure...

CVE-2024-22260: Exposure of Sensitive Information to an Unauthorized Actor

VMware Workspace One UEM update addresses an information exposure vulnerability. A malicious actor with network access to the Workspace One UEM may be able to perform an attack resulting in an information exposure...

PT-2024-5010

Name of the Vulnerable Software and Affected Versions: VMware Workspace One UEM affected versions not specified Description: The issue is related to insufficient protection of service data, which may allow a remote attacker to disclose protected information. A malicious actor with network access ...

Unified Management Console VMware Workspace ONE UEM Privilege Escalation

The vulnerability of the Unified Management Console for VMware Workspace ONE UEM involves redirecting the URL to an unreliable website. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...