Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS restrictions to gain access to sensitive networks.
References
| Link | Resource |
|---|---|
| https://static.omnissa.com/sites/default/files/OMSA-2025-0002.pdf | Vendor Advisory |
| https://www.omnissa.com/omnissa-security-response/ | Vendor Advisory |
Configurations
History
21 Apr 2025, 18:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.omnissa.com/omnissa-security-response/ - Vendor Advisory | |
| References | () https://static.omnissa.com/sites/default/files/OMSA-2025-0002.pdf - Vendor Advisory | |
| First Time |
Omnissa
Omnissa unified Access Gateway |
|
| CPE | cpe:2.3:a:omnissa:unified_access_gateway:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
17 Apr 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-17 15:15
Updated : 2025-04-21 18:35
NVD link : CVE-2025-25234
Mitre link : CVE-2025-25234
JSON object : View
Products Affected
omnissa
- unified_access_gateway
CWE
No CWE.