CVE-2025-27705
Severity CVSS v4.0:
MEDIUM
Type:
CWE-79
Cross-Site Scripting (XSS)
Publication date:
19/03/2025
Last modified:
19/03/2025
Description
There is a cross-site scripting vulnerability in the Secure<br />
Access administrative console of Absolute Secure Access prior to version 13.53.<br />
Attackers with system administrator permissions can interfere with another<br />
system administrator’s use of the management console when the second<br />
administrator logs in. Attack complexity is high, attack requirements are<br />
present, privileges required are none, user interaction is required. The impact<br />
to confidentiality is low, the impact to availability is none, and the impact<br />
to system integrity is none.
Impact
Base Score 4.0
5.50
Severity 4.0
MEDIUM