Skip to content
OpenAdvisories
High · 8.6 CVE-2025-25235 EUVD-2025-24188GHSA-pgr9-w2r6-xp6r

Omnissa Secure Email Gateway (SEG) updates address Server-Side Request Forgery (SSRF) vulnerability

Published Aug 11, 2025 · Updated Aug 12, 2025 · Assigned by Omnissa

Description

Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks.

Affected products

VendorProductAffectedFixed
Omnissa Secure Email Gateway — 2.32 and later

References