Vulnerabilidades en Absolute Security

35 resultados
Análisis Vexday

A Absolute Security apresenta 32 vulnerabilidades conhecidas na base, com 11 divulgadas nos últimos 90 dias, indicando atividade recente de descobertas. Nenhuma das vulnerabilidades está sob ataque ativo (KEV) e não há críticas de CVSS, sugerindo risco contido no curto prazo. A fraqueza dominante é Cross-Site Scripting (CWE-79), típica de aplicações web, requerendo atenção em validação de entrada e output encoding.

CVE-2026-55400MEDIUMCVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send sEPSS 0.3%CVE-2025-27706MEDIUMCross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54EPSS 0.2%CVE-2025-49082MEDIUMPermissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56EPSS 0.2%CVE-2025-54089MEDIUMCross-site Scripting vulnerability in Secure Access prior to 14.10EPSS 0.2%CVE-2025-59596MEDIUMCVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14EPSS 0.2%CVE-2025-54085MEDIUMElevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56EPSS 0.2%CVE-2025-54087LOWServer-side request forgery in Secure AccessEPSS 0.2%CVE-2025-54088MEDIUMOpen Redirect in Secure Access prior to 14.10EPSS 0.2%CVE-2024-6364MEDIUMServer Identity Validation Bypass in Absolute Persistence®EPSS 0.2%CVE-2025-54086MEDIUMExcess Permissions in WarehouseEPSS 0.2%CVE-2026-0518MEDIUMXSS in Secure Access Consoles prior to 14.20EPSS 0.2%CVE-2024-40872HIGHElevation of privilege in Absolute Secure Access clients and serversEPSS 0.2%CVE-2026-0519MEDIUMInformation Disclosure in Secure Access Between 12.70 and 14.20EPSS 0.1%CVE-2026-40952HIGHPrivilge misconfiguration in Secure Access installersEPSS 0.1%CVE-2026-40953MEDIUMHeap overflow in Secure Access clientsEPSS 0.1%