Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Absolute Security Secure Access 14.20 Clear all filters
TI-2026-00327 CVE-2026-0519 · GHSA-c4w9-xpcr-fxjj

Information Disclosure in Secure Access Between 12.70 and 14.20

Priority LOW 20

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations.

CVSS 4.0MEDIUM 4.6 Local High privileges No interaction EPSS 0.00135 Published 2026-01-17 Fixed in 14.20 CWE-532
TI-2026-00326 CVE-2026-0518 · GHSA-jc22-fwx5-phhh

XSS in Secure Access Consoles prior to 14.20

Priority LOW 21

CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00173 Published 2026-01-17 Fixed in 14.20 CWE-79
TI-2026-00325 CVE-2026-0517 · GHSA-7r6x-p782-g6p6

Denial of Service in Secure Access Servers Prior to 14.20.

Priority LOW 27

CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00314 Published 2026-01-17 Fixed in 14.20 CWE-400