Cross-Site Scripting Flaw in Secure Access by Absolute

CVE-2025-54089

What is CVE-2025-54089?

A cross-site scripting vulnerability exists in Absolute's Secure Access platform in versions prior to 14.10. This vulnerability allows attackers with administrative privileges to exploit the console, potentially disrupting access for other administrators. While the attack complexity is low and does not require additional conditions, it necessitates the victim's active involvement. While there is minimal threat to confidentiality or availability, integrity may be at risk during the exploitation.

References