Omnissa vulnerabilities
We track 6 vulnerabilities in Omnissa products across 6 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2025.
Latest Omnissa vulnerabilities
- 8.6 High severity
Secure Email Gateway: Server-Side Request Forgery
Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks.
- 7.5 High severity
Omnissa Workspace ONE UEM: Improper Limitation of a Pathname to a Restricted Directory
Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.
- 7.5 High severity
Omnissa Unified Access Gateway (UAG): Permissive Cross-domain Security Policy with Untrusted Domains
Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS restrictions to gain access to sensitive networks.
- 7.8 High severity
Omnissa Horizon Client for Windows: Improper Privilege Management
Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Client for Windows is installed may be able to elevate privileges.
- 7.8 High severity
Omnissa Horizon Client for MacOS: Incorrect Default Permissions
Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the sys
- 7.8 High severity
Omnissa Horizon Client for MacOS: Improper Privilege Management
Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon