Advisories · Technology
Absolute Security Secure Access.
Every CVE that names Absolute Security Secure Access among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
Authentication bypass in Secure Access Servers
- Absolute Security Secure Access
- CVSS 9.4 CriticalCritical · CVSS 9+
CSRF in Secure Access Server v14.60
- Absolute Security Secure Access
- CVSS 6.0 Medium
Denial of Service in Absolute Secure Access
- Absolute Security Secure Access
- Denial of service
- CVSS 8.7 High
Denial of Service in Absolute Secure Access
- Absolute Security Secure Access
- Denial of service
- CVSS 7.1 High
Denial of Service in Absolute Secure Access
- Absolute Security Secure Access
- Denial of service
- CVSS 8.2 High
Denial of service vulnerability in Secure Access
- Absolute Security Secure Access
- Denial of service
- CVSS 8.7 High
Out-of-bounds read in Absolute Security Secure Access
- Absolute Security Secure Access
- Memory corruption
- CVSS 6.9 Medium
NULL pointer dereference in Absolute Security Secure Access
- Absolute Security Secure Access
- Memory corruption
- CVSS 6.0 Medium
Integer overflow in Absolute Security Secure Access
- Absolute Security Secure Access
- Memory corruption
- CVSS 5.1 Medium
Resource exhaustion vulnerability in the Secure Access publisher
- Absolute Security Secure Access
- Denial of service
- CVSS 6.9 Medium
Memory management vulnerability in Secure Access clients
- Absolute Security Secure Access
- Memory corruption
- Denial of service
- CVSS 8.7 High
Memory management vulnerability in Secure Access servers
- Absolute Security Secure Access
- Denial of service
- CVSS 7.1 High
Memory management error in Secure Access servers prior to 14.55
- Absolute Security Secure Access
- Denial of service
- CVSS 2.3 Low
Input validation error in Secure Access clients prior to 14.55
- Absolute Security Secure Access
- CWE-20
- CVSS 6.1 Medium
Frameable content vulnerability in the Secure Access server login page
- Absolute Security Secure Access
- CWE-1021
- CVSS 2.1 Low
Memory disclosure in Secure Access Clients
- Absolute Security Secure Access
- Information disclosure
- CVSS 2.1 Low
Integer underflow vulnerability in Secure Access clients
- Absolute Security Secure Access
- Memory corruption
- CVSS 2.1 Low
Integer underflow in Secure Access clients prior to 14.55
- Absolute Security Secure Access
- Memory corruption
- CVSS 6.7 Medium
Heap overflow in Secure Access clients
- Absolute Security Secure Access
- Memory corruption
- CVSS 8.5 High
Privilge misconfiguration in Secure Access installers
- Absolute Security Secure Access
- Broken access control
- CVSS 4.6 Medium
Information Disclosure in Secure Access Between 12.70 and 14.20
- Absolute Security Secure Access
- Information disclosure
- CVSS 4.8 Medium
XSS in Secure Access Consoles prior to 14.20
- Absolute Security Secure Access
- Cross-site scripting (XSS)
- CVSS 6.0 Medium
Denial of Service in Secure Access Servers Prior to 14.20.
- Absolute Security Secure Access
- Denial of service
- CVSS 6.0 Medium
Improper input validation in Absolute Security Secure Access
- Absolute Security Secure Access
- CWE-20
- CVSS 4.6 Medium
Cross-site Scripting vulnerability in Secure Access prior to 14.10
- Absolute Security Secure Access
- Cross-site scripting (XSS)
- CVSS 5.5 Medium
Open Redirect in Secure Access prior to 14.10
- Absolute Security Secure Access
- Open redirect
- CVSS 1.8 Low
Server-side request forgery in Secure Access
- Absolute Security Secure Access
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Excess Permissions in Warehouse
- Absolute Security Secure Access
- Broken access control
- CVSS 5.1 Medium
Permissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56
- Absolute Security Secure Access
- Broken access control
- CVSS 5.1 Medium
Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56
- Absolute Security Secure Access
- Broken access control
- CVSS 7.0 High
Data deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56
- Absolute Security Secure Access
- Insecure deserialization
- CVSS 6.9 Medium
Input validation vulnerability in the Secure Access prior to version 13.55
- Absolute Security Secure Access
- CWE-20
- CVSS 8.7 High
Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54
- Absolute Security Secure Access
- CWE-762
- CVSS 4.6 Medium
Cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54
- Absolute Security Secure Access
- Cross-site scripting (XSS)
- CVSS 7.0 High
Privilege escalation in the management console of Absolute Secure Access prior to version 13.54
- Absolute Security Secure Access
- CWE-281
- CVSS 6.9 Medium
Permissions bypass in the management console of Absolute Secure Access prior to version 13.54
- Absolute Security Secure Access
- Broken access control
- CVSS 5.5 Medium
Cross-site scripting in Absolute Security Secure Access
- Absolute Security Secure Access
- Cross-site scripting (XSS)
- CVSS 5.5 Medium
Cross-site scripting in Absolute Security Secure Access
- Absolute Security Secure Access
- Cross-site scripting (XSS)
- CVSS 4.5 Medium
XSS in Secure Access administrative console
- Absolute Security Secure Access
- Cross-site scripting (XSS)
- CVSS 8.4 High
Elevation of privilege in Absolute Secure Access clients and servers
- Absolute Security Secure Access
- Memory corruption