Vulnerabilidades en Absolute Software

21 resultados
Análisis Vexday

Absolute Software apresenta 21 vulnerabilidades catalogadas, com 10 divulgadas nos últimos 90 dias, indicando atividade recente de descoberta. Nenhuma está sob exploração ativa em campanha (KEV) e não há críticas CVSS, reduzindo a urgência imediata. A fraqueza dominante é CWE-79 (Cross-site Scripting), típica de aplicações web, que requer interação do usuário e não representa risco sistêmico de acesso remoto não autenticado.

CVE-2024-37346MEDIUMInsufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.06EPSS 0.4%CVE-2024-40875MEDIUMCross-site scripting vulnerability in the Secure Access administrative console prior to 13.52EPSS 0.3%CVE-2026-33446LOWBuffer overflow in client authentication prior to version 14.50EPSS 0.3%CVE-2024-37350MEDIUMCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06EPSS 0.3%CVE-2024-37351MEDIUMCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06EPSS 0.3%CVE-2024-37344MEDIUMCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06EPSS 0.3%CVE-2024-37349MEDIUMCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06EPSS 0.3%CVE-2024-37348MEDIUMCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06EPSS 0.3%CVE-2024-37347MEDIUMCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06EPSS 0.3%CVE-2024-37352MEDIUMCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06EPSS 0.3%CVE-2026-33447LOWCVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a EPSS 0.3%CVE-2026-40950HIGHBuffer overflow in the Secure Access server prior to 14.50EPSS 0.2%CVE-2026-33449LOWMessage handler buffer overflow in clients prior to 14.50EPSS 0.2%CVE-2024-37343MEDIUMCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06EPSS 0.2%CVE-2024-37345MEDIUMCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06EPSS 0.2%CVE-2026-33450LOWOut of bounds read in Secure Access MacOS clients prior to 14.50EPSS 0.2%CVE-2026-33451HIGHArbitrary read/write vulnerability in Windows clients prior to 14.50EPSS 0.1%CVE-2026-40949MEDIUMBuffer overflow in Windows clients prior to 14.50EPSS 0.1%CVE-2026-33448MEDIUMFormat string vulnerability in MacOS clients prior to 14.50EPSS 0.1%CVE-2026-33452MEDIUMBuffer overflow in Windows clients prior to 14.50EPSS 0.1%