Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-25234

Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS r

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Omnissa

Description

Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS restrictions to gain access to sensitive networks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Omnissa Omnissa Unified Access Gateway (UAG)

Default version status: unaffected

  • Omnissa Unified Access Gateway 2412 or earlieraffected

References