Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

workspace-one-uem

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks.

CVE-2025-25236 is an information disclosure vulnerability classified under CWE-204 (Observable Discrepancy Response) found in Omnissa Workspace ONE UEM. The vulnerability arises from inconsistent or distinguishable responses from the system when queried with different inputs, allowing an unauthenticated attacker to enumerate sensitive data such as tenant IDs and user accounts. This enumeration can be leveraged to identify valid accounts and tenant identifiers, which are critical for targeted credential-based attacks like brute-force, password spraying, or credential stuffing. The vulnerability affects multiple versions of Omnissa Workspace ONE UEM prior to 24.10.0.25, 24.6.0.44, and 24.2.0.36, indicating that it spans several recent releases. The CVSS 3.1 base score is 5.3, with attack vector network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), limited confidentiality impact (C:L), and no impact on integrity or availability (I:N/A:N). This means the vulnerability can be exploited remotely without authentication or user interaction, but the impact is limited to information disclosure. No public exploits are known at this time, but the vulnerability could facilitate further attacks by providing attackers with valuable reconnaissance data. The lack of patch links suggests that organizations should monitor Omnissa advisories for updates and apply patches promptly once available.

Detailed information about CVE-2025-25236: CWE-204 Observable Discrepancy Response in Omnissa Omnissa Workspace ONE UEM affecting Omnissa Omnissa Workspace ONE 

CVE-2025-25236: CWE-204 Observable Discrepancy Response in Omnissa Omnissa Workspace ONE UEM - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-25236: CWE-204 Observable Discrepancy Response in Omnissa Omnissa Workspace ONE UEM

Threats Tagged 'cve-2025-25236'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-25236'

Lead Pen Test Professional