Cross-Site Scripting Vulnerability in Absolute Secure Access Management Console

CVE-2025-27706

What is CVE-2025-27706?

A cross-site scripting vulnerability exists in the management console of Absolute Secure Access versions prior to 13.54. This vulnerability allows attackers with system administrator permissions to exploit the console, potentially interfering with the activities of another administrator who accesses the affected page. The complexity of the attack is low, requiring no pre-existing conditions, but does necessitate high-level privileges and active user interaction. While the risks to confidentiality are minimal, there is a low impact on data integrity, and availability remains unaffected.

References