SSRF in Omnissa Secure Email Gateway
CVE-2025-25235
Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks.
Vulnerability class: SSRF (Server-Side Request Forgery)
EPSS: 0.003 (19.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N.
Affected products
- Omnissa Secure Email Gateway — versions 2.32 and later, 2503 and later
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-25235?
- CVE-2025-25235 is a high-severity vulnerability in Omnissa Secure Email Gateway, classified under Server-Side Request Forgery (SSRF). CVSS score: 8.6/10. Published 2025-08-11.
- How severe is CVE-2025-25235?
- High severity. CVSS v3 base score is 8.6 out of 10.