Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Secure Access — Vulnerabilities & Security Advisories 59

All 59 CVE vulnerabilities found in Secure Access, with AI-generated Chinese analysis, references, and POCs.

This vulnerability aggregation page tracks security issues for the product "Secure Access". It collects historical vulnerability records associated with this specific product, covering the time period from the product's initial release through the most recent advisory. Readers can use this page to monitor the vendor's latest security advisories, examine the recurring weakness types affecting the product, and review its complete vulnerability history.

Vendor: Ivanti

CVE ID Title CVSS Severity Published
CVE-2025-54089 Cross-site Scripting vulnerability in Secure Access prior to 14.10 4.8AI Medium AI 2025-10-02
CVE-2025-54088 Open Redirect in Secure Access prior to 14.10 5.4AI Medium AI 2025-10-02
CVE-2025-54087 Server-side request forgery in Secure Access 6.8AI Medium AI 2025-10-02
CVE-2025-54086 Excess Permissions in Warehouse 5.5AI Medium AI 2025-10-02
CVE-2025-49082 Permissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 5.1AI Medium AI 2025-07-30
CVE-2025-54085 Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 7.2AI High AI 2025-07-30
CVE-2025-49084 Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 6.3AI Medium AI 2025-07-30
CVE-2025-49083 Data deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 7.2AI High AI 2025-07-30
CVE-2025-49081 Input validation vulnerability in the Secure Access prior to version 13.55 2.3AI Low AI 2025-06-12
CVE-2025-49080 Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54 7.5AI High AI 2025-06-12
CVE-2025-27706 Cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54 4.8AI Medium AI 2025-05-28
CVE-2025-27703 Privilege escalation in the management console of Absolute Secure Access prior to version 13.54 7.2AI High AI 2025-05-28
CVE-2025-27702 Permissions bypass in the management console of Absolute Secure Access prior to version 13.54 7.2AI High AI 2025-05-28
CVE-2025-27705 Absolute Secure Access 安全漏洞 CWE-79 4.8 - 2025-03-19
CVE-2025-27704 Absolute Secure Access 安全漏洞 CWE-79 4.8 - 2025-03-19
CVE-2024-40875 Cross-site scripting vulnerability in the Secure Access administrative console prior to 13.52 CWE-79 4.8 - 2024-12-20
CVE-2024-40873 XSS in Secure Access administrative console CWE-79 4.5 Medium 2024-07-25
CVE-2024-40872 Elevation of privilege in Absolute Secure Access clients and servers CWE-822 8.4 High 2024-07-25
CVE-2024-37352 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 CWE-79 4.5 Medium 2024-06-20
CVE-2024-37351 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 CWE-79 4.5 Medium 2024-06-20
CVE-2024-37350 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 CWE-79 6.5 Medium 2024-06-20
CVE-2024-37349 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 CWE-79 4.5 Medium 2024-06-20
CVE-2024-37348 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 CWE-79 4.5 Medium 2024-06-20
CVE-2024-37347 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 CWE-79 4.5 Medium 2024-06-20
CVE-2024-37346 Insufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.06 CWE-20 4.9 Medium 2024-06-20
CVE-2024-37345 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 CWE-79 5.3 Medium 2024-06-20
CVE-2024-37344 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 CWE-79 4.5 Medium 2024-06-20
CVE-2024-37343 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 CWE-79 4.8 Medium 2024-06-20
CVE-2023-41718 Ivanti Secure Access Client 安全漏洞 7.3 - 2023-11-14

All 59 known CVE vulnerabilities affecting Secure Access with full Chinese analysis, references, and POCs where available.