Vulnerabilities

TI-2025-20500 CVE-2025-27706 · GHSA-pqgc-jxwr-49w4

Cross-site scripting in Absolute Security Secure Access

LOW 21

CVE-2025-27706 is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to version 13.54.

CVSS 4.0MEDIUM 4.6 Network High privileges User interaction EPSS 0.00251 Published 2025-05-28 Fixed in 13.54 CWE-79

TI-2025-20497 CVE-2025-27703 · GHSA-c3vv-fgcp-2m26

LOW 31

CVE-2025-27703 is a privilege escalation vulnerability in the management console of Absolute Secure Access prior to version 13.54.

CVSS 4.0HIGH 7.0 Network High privileges No interaction EPSS 0.00311 Published 2025-05-28 Fixed in 13.54 CWE-281

TI-2025-20496 CVE-2025-27702 · GHSA-jfpv-3cvw-74x9

LOW 30

CVE-2025-27702 is a vulnerability in the management console of Absolute Secure Access prior to version 13.54.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00321 Published 2025-05-28 Fixed in 13.54 CWE-284