Omnissa, LLC is a security and endpoint-management vendor with a narrowly scoped vulnerability footprint centered on its Unified Access Gateway product. The observed weakness class involves permissive cross-domain security policies that allow untrusted domain interactions, reflecting the gateway's role in federated access control. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Omnissa, LLC over time
Of all the CVEs published by Omnissa, LLC as a CNA, 20.0% affect products that Omnissa, LLC develops as a vendor.
Of all the CVEs published that affect products developed by Omnissa, LLC, 100.0% are self-published by Omnissa, LLC as a CNA.
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-22927HIGH Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability. | Jul 8, 2026 | 7.8 | 34 | NO | NO |
CVE-2025-25234HIGH Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS r | Apr 17, 2025 | 7.5 | 21 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Omnissa, LLC.
Media articles that mention a CVE ID that affects a product developed by Omnissa, LLC — matched by CVE ID, not by vendor name.