Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54
Vulnerability Description
CVE-2025-27706 is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator visits the page. Attack complexity is low, there are no preexisting attack requirements, privileges required are high and active user interaction is required. There is no impact on confidentiality, the impact on integrity is low and there is no impact on availability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Absolute Secure Access 安全漏洞
Vulnerability Description
Absolute Secure Access是Absolute公司的一款应用程序。以提供针对混合和移动工作模式优化的安全服务边缘（SSE）。 Absolute Secure Access 13.54之前版本存在安全漏洞，该漏洞源于管理控制台跨站脚本，可能导致系统管理员权限的攻击者干扰其他管理员使用控制台。
CVSS Information
N/A
Vulnerability Type
N/A