CVE-2025-25235

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-25235
Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks.

8.6 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://www.omnissa.com/omsa-2025-0003/
Configurations

No configuration.

History

12 Aug 2025, 14:25

Type Values Removed Values Added
Summary
  • (es) Server-Side Request Forgery (SSRF) en Omnissa Secure Email Gateway (SEG) en SEG anterior a 2.32 que se ejecuta en Windows y SEG anterior a 2503 que se ejecuta en UAG permite el enrutamiento del tráfico de red, como solicitudes HTTP, a redes internas.

11 Aug 2025, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-11 22:15

Updated : 2025-08-12 14:25

NVD link : CVE-2025-25235

Mitre link : CVE-2025-25235

CVE.ORG link : CVE-2025-25235

JSON object : View

Products Affected

No product.

CWE
CWE-918

Server-Side Request Forgery (SSRF)