Exploited Vulnerabilities DailyCVE-2021-22054: Omnissa Workspace One UEM
EPSS99.6%No. 173 of 1739 in KEV
CVE year2021~5 yrs before listing
Same vendor in KEV1
Same product1
| Field | Value |
|---|---|
| Vendor | Omnissa |
| Product | Workspace One UEM |
| Name | Omnissa Workspace ONE Server-Side Request Forgery |
| Added to KEV | 2026-03-09 |
| US federal due date | 2026-03-23 |
| Ransomware use | Unknown |
| CWE | CWE-918 |
CISA description
Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Omnissa Workspace One UEM vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2026-03-09.