CVE-2025-27704: XSS
There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator logs in. Attack complexity is high, attack requirements are present, privileges required are none, user interaction is required. The impact to confidentiality is low, the impact to availability is none, and the impact to system integrity is none.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27704?
CVE-2025-27704 is classified as a critical severity vulnerability due to its potential for exploitation by attackers with administrative permissions.
How do I fix CVE-2025-27704?
To fix CVE-2025-27704, upgrade Absolute Secure Access to version 13.53 or later where the vulnerability has been addressed.
Who is affected by CVE-2025-27704?
CVE-2025-27704 affects system administrators using Absolute Secure Access versions prior to 13.53.
What type of vulnerability is CVE-2025-27704?
CVE-2025-27704 is a cross-site scripting vulnerability present in the Secure Access administrative console.
What can attackers do with CVE-2025-27704?
Attackers with system administrator permissions can disrupt the management console's functionality for other administrators.