CVE-2025-49080

Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54

High · published June 12, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

There is a memory management vulnerability in Absolute

Secure Access server versions 9.0 to 13.54. Attackers with network access to

the server can cause a Denial of Service by sending a specially crafted

sequence of packets to the server. The attack complexity is low, there are no

attack requirements, privileges, or user interaction required. Loss of

availability is high; there is no impact on confidentiality or integrity.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00370 · 29.7th percentile
Published
2025-06-12T17:08Z
EPSS history
Timeline
  • 12 JUN 17:08Z
    Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54
    cvelistv5