CVE-2025-27702

CVE-2025-27702 is a vulnerability in the management console of AbsoluteSecure Access prior to version 13.54. Attackers with administrativeaccess to the console and who have been assigned a certain set ofpermissions can bypass those permissions to improperly modify settings.The attack complexity is ...

CVE-2024-37350

There is a cross-site scripting vulnerability in the policymanagement UI of Absolute Secure Access prior to version 13.06. Attackers caninterfere with a system administrator’s use of the policy management UI whenthe attacker convinces the victim administrator to follow a crafted link to thevulnerab...

CVE-2025-49081

There is an insufficient input validation vulnerability in the warehousecomponent of Absolute Secure Access prior to server version 13.55. Attackerswith system administrator permissions can impair the availability of the SecureAccess administrative UI by writing invalid data to the warehouse over t...