CVE-2025-25235: Omnissa Secure Email Gateway (SEG) updates address Server-Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25235?
CVE-2025-25235 is a critical severity vulnerability due to its potential to allow unauthorized network traffic routing.
How do I fix CVE-2025-25235?
To fix CVE-2025-25235, upgrade to Omnissa Secure Email Gateway version 2.32 or higher on Windows and version 2503 or higher on UAG.
What systems are affected by CVE-2025-25235?
CVE-2025-25235 affects Omnissa Secure Email Gateway versions prior to 2.32 on Windows and versions prior to 2503 on UAG.
What type of vulnerability is CVE-2025-25235?
CVE-2025-25235 is classified as a Server-Side Request Forgery (SSRF) vulnerability.
What risks are associated with CVE-2025-25235?
CVE-2025-25235 can lead to unauthorized access to internal networks and potentially sensitive data.