Skip to content
OpenAdvisories
Medium WID-SEC-2025-2172 4 CVEs

Absolute Secure Access: Mehrere Schwachstellen

Published Sep 30, 2025 · Updated Oct 5, 2025 · Revision 2 · de-DE

Vendor: Absolute Software Product: Secure Access Platform: Android

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Absolute Secure Access ausnutzen, um Informationen offenzulegen, falsche Informationen darzustellen oder einen Cross Site Scripting Angriff durchzuführen.

Product

Absolute Secure Access ist eine Sicherheitslösung, die einen sicheren Netzwerkzugriff für Endgeräte ermöglicht, unabhängig von deren Standort.

Vulnerabilities 4

  • Medium 5.5
    CVE-2025-54088

    Open Redirect in Secure Access prior to 14.10

    CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an arbitrary URL. The attack complexity is low, attack requirements are present, no privileges are required,…

    Absolute Security Secure Access
  • Medium 5.3
    CVE-2025-54086

    Excess Permissions in Warehouse

    CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10. Attackers with access to the local file system can read the Java keystore file. The attack complexity is low, there are no attac…

    Absolute Security Secure Access
  • Medium 4.6
    CVE-2025-54089

    Cross-site Scripting vulnerability in Secure Access prior to 14.10

    CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with administrative access to the console can interfere with another administrator’s access to the console. The attack complexity is low; there are n…

    Absolute Security Secure Access
  • Low 1.8
    CVE-2025-54087

    Server-side request forgery in Secure Access

    CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. The attack complexity is high, t…

    Absolute Security Secure Access

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-32209, EUVD-2025-32210, EUVD-2025-32206, EUVD-2025-32208

  2. #1

    Initiale Fassung

References