Vulnerabilidades en Absolute Security

35 resultados
Análisis Vexday

A Absolute Security apresenta 32 vulnerabilidades conhecidas na base, com 11 divulgadas nos últimos 90 dias, indicando atividade recente de descobertas. Nenhuma das vulnerabilidades está sob ataque ativo (KEV) e não há críticas de CVSS, sugerindo risco contido no curto prazo. A fraqueza dominante é Cross-Site Scripting (CWE-79), típica de aplicações web, requerendo atenção em validação de entrada e output encoding.

CVE-2025-49081MEDIUMInput validation vulnerability in the Secure Access prior to version 13.55EPSS 0.5%CVE-2026-40957MEDIUMFrameable content vulnerability in the Secure Access server login pageEPSS 0.4%CVE-2026-33445HIGHMemory management vulnerability in Secure Access serversEPSS 0.4%CVE-2026-40958LOWInput validation error in Secure Access clients prior to 14.55EPSS 0.4%CVE-2026-33443HIGHMemory management error in Secure Access servers prior to 14.55EPSS 0.4%CVE-2025-49080HIGHMemory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54EPSS 0.4%CVE-2025-49083HIGHData deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56EPSS 0.4%CVE-2026-55399MEDIUMResource exhaustion vulnerability in the Secure Access publisherEPSS 0.4%CVE-2026-55398MEDIUMMemory management vulnerability in Secure Access clientsEPSS 0.4%CVE-2026-40954LOWInteger underflow in Secure Access clients prior to 14.55EPSS 0.3%CVE-2026-40955LOWInteger underflow vulnerability in Secure Access clientsEPSS 0.3%CVE-2025-27705MEDIUMThere is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. EPSS 0.3%CVE-2025-27704MEDIUMThere is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. EPSS 0.3%CVE-2025-27702MEDIUMPermissions bypass in the management console of Absolute Secure Access prior to version 13.54EPSS 0.3%CVE-2026-0517MEDIUMDenial of Service in Secure Access Servers Prior to 14.20.EPSS 0.3%CVE-2025-27703HIGHPrivilege escalation in the management console of Absolute Secure Access prior to version 13.54EPSS 0.3%CVE-2026-55401MEDIUMCVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can EPSS 0.3%CVE-2026-55402HIGHCVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ pEPSS 0.3%CVE-2026-40956LOWMemory disclosure in Secure Access ClientsEPSS 0.3%CVE-2024-40873MEDIUMXSS in Secure Access administrative consoleEPSS 0.3%