Cross-Site Scripting Vulnerability in Absolute Secure Access Administrative Console

CVE-2025-27705

What is CVE-2025-27705?

The administrative console of Absolute Secure Access is susceptible to cross-site scripting attacks due to insufficient input validation. This vulnerability allows attackers with system administrator permissions to disrupt another administrator's usage of the console when they attempt to log in. The attack complexity is high, requiring specific privileges and user interaction. Although the potential impact on confidentiality is low, organizations must remain vigilant to ensure the security of their administrative operations.

References