Omnissa external vulnerability response & remediation policy
We understand that unless our products adhere to the utmost standards for security, customers will lack the confidence to use them. To achieve this, Omnissa maintains a program to identify, respond, and manage vulnerabilities. This Security Response Policy outlines the process utilized by Omnissa.
How to report vulnerabilities
If you discover a vulnerability in an Omnissa product or service, kindly inform us by sending a confidential email to security@omnissa.com. Omnissa follows responsible vulnerability disclosure protocols, where researchers report newly identified vulnerabilities directly to us, allowing prompt mitigation before public disclosure, and may receive acknowledgment for their efforts.
Safe harbor
Engaging in activities consistent with this policy will be deemed authorized, and Omnissa will refrain from pursuing legal action against you. Should a third party initiate legal proceedings related to activities under this policy, we will endeavor to affirm your compliance.
Omnissa Security Advisory (OMSAs)
Omnissa discloses vulnerabilities in Ominssa Security Advisories. OMSAs will include:.
- CVSS Scoring & Severity Rating
- Affected Products/Services
- Vulnerability Details
- Remediation Information
- Acknowledgements
- References
Omnissa Security Advisories
| Severity | CVSSv3 Range | Identifier | Details |
|---|