CORS Bypass Vulnerability in Omnissa UAG Product
CVE-2025-25234
What is CVE-2025-25234?
Omnissa UAG is susceptible to a Cross-Origin Resource Sharing (CORS) bypass vulnerability. This security issue potentially allows a malicious actor with access to the network to circumvent the CORS restrictions set by administrators. As a result, unauthorized users may gain access to sensitive networks and data, presenting a significant risk to organizations utilizing this product. Ensuring proper security measures and applying relevant patches is crucial to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Omnissa Unified Access Gateway (UAG) Omnissa Unified Access Gateway 2412 or earlier
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
