KEV Entry

CVE-2025-25231

Known Exploited Vulnerability Entry ENISA

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2025-25231

2025-09-09 02:00 CEST

Timestamps

2025-09-09

2025-09-09

Scope

Affected: Omnissa / Omnissa Workspace ONE UEM | Description: Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints. | Patched since: 2025/08/11 | Exploitation type: unknown | CWEs: CWE-22 | Origin source: CERT-PL | Notes: https://moje.cert.pl/komunikaty/2025/29/aktywnie-wykorzystywana-krytyczna-podatnosc-w-narzedziu-omnissa-workspace-one-uem-airwatch-mdm/

References
  • {'id': 'CVE-2025-25231', 'url': 'https://www.cve.org/CVERecord?id=CVE-2025-25231'}
  • {'id': 'EUVD-2025-24160', 'url': 'https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24160'}
  • {'id': 'source', 'url': 'https://moje.cert.pl/komunikaty/2025/29/aktywnie-wykorzystywana-krytyczna-podatnosc-w-narzedziu-omnissa-workspace-one-uem-airwatch-mdm/'}

01c3adee-d1c3-479c-877d-c5053711777a

ENISA
cce329bf-df49-4c6e-a027-80be2e6483bd

2026-10-02 08:52 CEST

2026-10-02 08:52 CEST

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
csirt_report enisa-cnw-kev successful_exploitation 0.75
View details 
{
  "catalog": "ENISA / EU CSIRTs Network (CNW) KEV JSON",
  "cwes": [
    "CWE-22"
  ],
  "dateReported": "2025/09/09",
  "euvd": "EUVD-2025-24160",
  "exploitationType": [
    "unknown"
  ],
  "notes": "https://moje.cert.pl/komunikaty/2025/29/aktywnie-wykorzystywana-krytyczna-podatnosc-w-narzedziu-omnissa-workspace-one-uem-airwatch-mdm/",
  "originSource": "CERT-PL",
  "patchedSince": "2025/08/11",
  "product": "Omnissa Workspace ONE UEM",
  "threatActorsExploiting": [],
  "vendorProject": "Omnissa",
  "vulnerabilityName": ""
}
 -
Export Options
JSON Object JSON API View Full Catalog