CORS Bypass Vulnerability in Omnissa UAG Product

CVE-2025-25234

What is CVE-2025-25234?

Omnissa UAG is susceptible to a Cross-Origin Resource Sharing (CORS) bypass vulnerability. This security issue potentially allows a malicious actor with access to the network to circumvent the CORS restrictions set by administrators. As a result, unauthorized users may gain access to sensitive networks and data, presenting a significant risk to organizations utilizing this product. Ensuring proper security measures and applying relevant patches is crucial to mitigate this vulnerability.

References