Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-54088 EUVD-2025-32579GHSA-4f9g-q8hh-64c9

Open Redirect in Secure Access prior to 14.10

Published Oct 2, 2025 · Updated Oct 7, 2025 · Assigned by Absolute

Description

CVE-2025-54088 is an open-redirect vulnerability in Secure
Access prior to version 14.10. Attackers with access to the console can
redirect victims to an arbitrary URL. The attack complexity is low, attack
requirements are present, no privileges are required, and users must actively
participate in the attack. Impact to confidentiality is low and there is no
impact to integrity or availability. There are high severity impacts to
confidentiality, integrity, availability in subsequent systems.

Affected products

VendorProductAffectedFixed
Absolute Security Secure Access < <14.10 <14.10

Advisories 1

References