PT-2025-32587 · Omnissa · Unified Access Gateway+1

Published 2025-08-11 · Updated 2025-08-11 · CVE-2025-25235

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Omnissa Secure Email Gateway (SEG) versions prior to 2.32 (Windows) Omnissa Secure Email Gateway (SEG) versions prior to 2503 (UAG)

Description: This issue is a Server-Side Request Forgery (SSRF) that allows routing of network traffic, such as HTTP requests, to internal networks. The vulnerability exists in on-prem deployments of Omnissa Secure Email Gateway (SEG) and Unified Access Gateway (UAG).

Recommendations: Update Omnissa Secure Email Gateway (SEG) to version 2.32 or later on Windows. Update Omnissa Secure Email Gateway (SEG) to version 2503 or later on UAG.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-25235

Affected Products

Omnissa Secure Email Gateway

Unified Access Gateway

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-25235 · Security Note
• https://omnissa.com/omsa-2025-0003 · Note
• https://t.me/CVEtracker/29718 · Telegram Post
• https://twitter.com/CVEnew/status/1955030432216649812 · Twitter Post
• https://twitter.com/CveFindCom/status/1955029408936251529 · Twitter Post
• https://t.me/cveNotify/131745 · Telegram Post
• https://twitter.com/FerroqueSystems/status/1955006140883906942 · Twitter Post