CVE-2025-25235CWE-918

Omnissa Secure Email Gateway (SEG) updates address Server-Side Request Forgery (SSRF) vulnerability

High · published August 11, 2025

CVSS v3.1
8.6
EPSS
0%
Percentile
21.1
In the wild
Unconfirmed
What it is

Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00296 · 21.1th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2025-08-11T21:47Z
EPSS history
Timeline
  • 11 AUG 21:47Z
    Omnissa Secure Email Gateway (SEG) updates address Server-Side Request Forgery (SSRF) vulnerability
    cvelistv5