← Database

CVE-2025-25234

HIGH CVSS: 7.1 Published: 2025-04-17 Modified: 2026-06-17

Description

Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS restrictions to gain access to sensitive networks.

Affected Platforms

Omnissa Unified Access Gateway

Weakness Type

CWE-942

References