Lucene search
+L

1211 matches found

Vulnrichment
Vulnrichment
added 2026/01/17 1:13 a.m.4 views

CVE-2026-0519 Information Disclosure in Secure Access Between 12.70 and 14.20

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS5.4AI score0.0012EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/17 1:13 a.m.25 views

CVE-2026-0519 Information Disclosure in Secure Access Between 12.70 and 14.20

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS0.0012EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/17 1:13 a.m.9 views

EUVD-2026-3161

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS6.5AI score0.0012EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/17 1:13 a.m.24 views

CVE-2026-0519

CVE-2026-0519 : In Secure Access 12.70 and earlier than 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. This could allow any party with access to those logs to read the token and reuse it to access an integrated system. The provided ...

4.6CVSS6.6AI score0.0012EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/17 1:13 a.m.6 views

CVE-2026-0519

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS5.3AI score0.0012EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/17 1:9 a.m.2 views

CVE-2026-0518

CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20. An attacker with administrative privileges can interfere with another administrator’s use of the console...

4.8CVSS5.1AI score0.00145EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/17 1:9 a.m.21 views

CVE-2026-0518

CVE-2026-0518 is described across multiple sources as a cross-site scripting vulnerability in Secure Access prior to version 14.20. The issue allows an administrator to interfere with another administrator’s use of the console. The available documents indicate a low to moderate impact: confidenti...

4.8CVSS5.8AI score0.00145EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/01/17 1:9 a.m.8 views

EUVD-2026-3159

CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20. An attacker with administrative privileges can interfere with another administrator’s use of the console...

4.8CVSS5.6AI score0.00145EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/17 1:9 a.m.33 views

CVE-2026-0518 XSS in Secure Access Consoles prior to 14.20

CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20. An attacker with administrative privileges can interfere with another administrator’s use of the console...

4.8CVSS0.00145EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/17 1:9 a.m.4 views

CVE-2026-0518 XSS in Secure Access Consoles prior to 14.20

CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20. An attacker with administrative privileges can interfere with another administrator’s use of the console...

4.8CVSS5.2AI score0.00145EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/17 1:4 a.m.4 views

EUVD-2026-3162

CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20. An attacker can send a specially crafted packet to a server and cause the server to crash...

6CVSS6.3AI score0.00281EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/17 1:4 a.m.4 views

CVE-2026-0517

CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20. An attacker can send a specially crafted packet to a server and cause the server to crash...

7.5CVSS5.5AI score0.00281EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/17 1:4 a.m.33 views

CVE-2026-0517

CVE-2026-0517: A denial-of-service flaw in Secure Access Server prior to 14.20 allows an attacker to crash the server by sending a specially crafted packet. Affected: Secure Access Server versions

7.5CVSS6.4AI score0.00281EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/17 1:4 a.m.4 views

CVE-2026-0517 Denial of Service in Secure Access Servers Prior to 14.20.

CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20. An attacker can send a specially crafted packet to a server and cause the server to crash...

6CVSS5.6AI score0.00281EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/17 1:4 a.m.24 views

CVE-2026-0517 Denial of Service in Secure Access Servers Prior to 14.20.

CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20. An attacker can send a specially crafted packet to a server and cause the server to crash...

6CVSS0.00281EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/17 12:0 a.m.7 views

Absolute Secure Access security vulnerability

Absolute Secure Access is an application developed by Absolute Corporation. It provides secure service edge SSE services optimized for mixed and mobile work environments. There are security vulnerabilities in Absolute Secure Access versions 12.70 and earlier, versions prior to 14.20. These...

4.6CVSS5.8AI score0.0012EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/17 12:0 a.m.8 views

Absolute Secure Access security vulnerability

Absolute Secure Access is an application developed by Absolute Corporation. It provides secure service edge SSE services optimized for both mixed and mobile work environments. Versions of Absolute Secure Access prior to 14.20 contained a security vulnerability that could cause server crashes if...

7.5CVSS5.8AI score0.00281EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/17 12:0 a.m.8 views

PT-2026-3333

CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20. An attacker with administrative privileges can interfere with another administrator’s use of the console...

4.8CVSS6.1AI score0.00145EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/17 12:0 a.m.14 views

PT-2026-3332

CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20. An attacker can send a specially crafted packet to a server and cause the server to crash...

6CVSS6.8AI score0.00281EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/17 12:0 a.m.10 views

Absolute Secure Access security vulnerability

Absolute Secure Access is an application developed by Absolute Corporation. It provides secure service edge SSE services optimized for mixed and mobile work environments. Versions of Absolute Secure Access prior to 14.20 contained a security vulnerability. This vulnerability allowed attackers wit...

4.8CVSS5.8AI score0.00145EPSS
SaveExploits0References2
Rows per page
Query Builder