Home

Description

CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. The attack complexity is high, there are no attack requirements, and user interaction is required. There is no direct impact to confidentiality, integrity, or availability. There is a low severity subsequent system impact to integrity.

PUBLISHED Reserved 2025-07-16 | Published 2025-10-02 | Updated 2025-10-07 | Assigner Absolute




LOW: 1.8CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

Product status

Default status
unaffected

Any version before <14.10
affected

References

www.absolute.com/...ion/vulnerability-archive/cve-2025-54087

cve.org (CVE-2025-54087)

nvd.nist.gov (CVE-2025-54087)

Download JSON