CVE-2025-25234

Publication date

2025-04-17 14:58:36

Family

Omnissa

State

PUBLISHED

Description

Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS restrictions to gain access to sensitive networks.