CVE Daily

CVE-2025-25235

Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG ...

High CVSS 8.6

Overview

Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks.

CWE: CWE-918 Published: 2025-08-11T22:15:26.693
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.6 (HIGH)
  • Detected tags: ssrf (tag impact: MODERATE)

Recommended actions:

  • Deny access to internal/metadata addresses; use outbound allowlists.

Recommended tools

Tags