Vulnerabilidades en Absolute Security

32 resultados
Análisis Vexday

A Absolute Security apresenta 32 vulnerabilidades conhecidas na base, com 11 divulgadas nos últimos 90 dias, indicando atividade recente de descobertas. Nenhuma das vulnerabilidades está sob ataque ativo (KEV) e não há críticas de CVSS, sugerindo risco contido no curto prazo. A fraqueza dominante é Cross-Site Scripting (CWE-79), típica de aplicações web, requerendo atenção em validação de entrada e output encoding.

CVE-2025-49081MEDIUMInput validation vulnerability in the Secure Access prior to version 13.55EPSS 0.4%CVE-2025-49083HIGHData deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56EPSS 0.4%CVE-2025-49080HIGHMemory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54EPSS 0.3%CVE-2026-40957MEDIUMFrameable content vulnerability in the Secure Access server login pageEPSS 0.3%CVE-2025-27705MEDIUMThere is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. EPSS 0.3%CVE-2025-27704MEDIUMThere is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. EPSS 0.3%CVE-2026-0517MEDIUMDenial of Service in Secure Access Servers Prior to 14.20.EPSS 0.3%CVE-2024-40873MEDIUMXSS in Secure Access administrative consoleEPSS 0.3%CVE-2025-27702MEDIUMPermissions bypass in the management console of Absolute Secure Access prior to version 13.54EPSS 0.3%CVE-2025-27703HIGHPrivilege escalation in the management console of Absolute Secure Access prior to version 13.54EPSS 0.3%CVE-2026-33445HIGHMemory management vulnerability in Secure Access serversEPSS 0.2%CVE-2026-40958LOWInput validation error in Secure Access clients prior to 14.55EPSS 0.2%CVE-2025-49082MEDIUMPermissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56EPSS 0.2%CVE-2026-55399MEDIUMResource exhaustion vulnerability in the Secure Access publisherEPSS 0.2%CVE-2026-33443HIGHMemory management error in Secure Access servers prior to 14.55EPSS 0.2%CVE-2026-55398MEDIUMMemory management vulnerability in Secure Access clientsEPSS 0.2%CVE-2025-27706MEDIUMCross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54EPSS 0.2%CVE-2025-59596MEDIUMCVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14EPSS 0.2%CVE-2026-40954LOWInteger underflow in Secure Access clients prior to 14.55EPSS 0.2%CVE-2026-40955LOWInteger underflow vulnerability in Secure Access clientsEPSS 0.2%