Skip to content
OpenAdvisories
High · 8.7 CVE-2025-49080 EUVD-2025-18200GHSA-qhf2-gm47-v465

Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54

Published Jun 12, 2025 · Updated Jun 17, 2025 · Assigned by Absolute

Description

There is a memory management vulnerability in Absolute
Secure Access server versions 9.0 to 13.54. Attackers with network access to
the server can cause a Denial of Service by sending a specially crafted
sequence of packets to the server. The attack complexity is low, there are no
attack requirements, privileges, or user interaction required. Loss of
availability is high; there is no impact on confidentiality or integrity.

Affected products

VendorProductAffectedFixed
Absolute Security Secure Access 9.0 – < 13.54 13.54

References