Cross-Site Scripting Issue in Absolute Secure Access

CVE-2024-37350

What is CVE-2024-37350?

A cross-site scripting vulnerability exists in the policy management UI of Absolute Secure Access prior to version 13.06. Attackers with the ability to convince a system administrator to click on a crafted link can exploit this vulnerability, potentially interfering with the administrator's use of the UI while authenticated. Although there is no loss of confidentiality, the impact on system integrity is noteworthy, emphasizing the importance of applying the latest updates to maintain security.

References