DeutschShown in its original language — a full translation is planned for a future version.
Absolute Secure Access: Mehrere Schwachstellen
view advisory published 2025-09-30
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Absolute Secure Access ausnutzen, um Informationen offenzulegen, falsche Informationen darzustellen oder einen Cross Site Scripting Angriff durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-54089US | low3.4 | — | ||
CVE-2025-54089 is a cross-site scripting vulnerability in versions
of secure access prior to 14.10. Attackers with administrative access to the
console can interfere with another a… | ||||
| CVE-2025-54088US | medium6.1 | — | ||
CVE-2025-54088 is an open-redirect vulnerability in Secure
Access prior to version 14.10. Attackers with access to the console can
redirect victims to an arbitrary URL. The attack… | ||||
| CVE-2025-54087US | low2.6 | — | ||
CVE-2025-54087 is a server-side request forgery
vulnerability in Secure Access prior to version 14.10. Attackers with
administrative privileges can publish a crafted test HTTP requ… | ||||
| CVE-2025-54086US | low3.3OT elevated | — | ||
CVE-2025-54086 is an excess permissions vulnerability in the
Warehouse component of Absolute Secure Access prior to version 14.10. Attackers
with access to the local file system ca… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2025-2172 - CSAF Versionself
- WID-SEC-2025-2172 - Portal Versionself
- Absolute Security Information vom 2025-09-30external
- Absolute Security Information vom 2025-09-30external
- Absolute Security Information vom 2025-09-30external
- Absolute Security Information vom 2025-09-30external
- Absolute Security Information vom 2025-09-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan