Security Advisory

CVE-2025-25234

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-17 14:58:36
Last updated 2025-04-17 18:53:19
Assigner Omnissa
State PUBLISHED

Description

Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS restrictions to gain access to sensitive networks.