CVE-2025-27705: XSS
There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator logs in. Attack complexity is high, attack requirements are present, privileges required are none, user interaction is required. The impact to confidentiality is low, the impact to availability is none, and the impact to system integrity is none.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Absolute Secure Accessto a version that resolves this vulnerability.Fixed in 13.53
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27705?
CVE-2025-27705 is classified as a cross-site scripting vulnerability affecting Absolute Secure Access prior to version 13.53.
How do I fix CVE-2025-27705?
To fix CVE-2025-27705, upgrade Absolute Secure Access to version 13.53 or later.
Who is affected by CVE-2025-27705?
System administrators using Absolute Secure Access prior to version 13.53 are affected by CVE-2025-27705.
What type of vulnerability is CVE-2025-27705?
CVE-2025-27705 is a cross-site scripting (XSS) vulnerability.
What consequences can CVE-2025-27705 lead to?
CVE-2025-27705 allows attackers with system administrator permissions to interfere with other administrators' use of the management console.