CVE-2025-49081

Input validation vulnerability in the Secure Access prior to version 13.55

Medium · published June 12, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

There is an insufficient input validation vulnerability in the warehouse

component of Absolute Secure Access prior to server version 13.55. Attackers

with system administrator permissions can impair the availability of the Secure

Access administrative UI by writing invalid data to the warehouse over the

network. The attack complexity is low, there are no attack requirements,

privileges required are high, and there is no user interaction required. There

is no impact on confidentiality or integrity; the impact on availability is

high.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00481 · 40.5th percentile
Published
2025-06-12T17:25Z
EPSS history
Timeline
  • 12 JUN 17:25Z
    Input validation vulnerability in the Secure Access prior to version 13.55
    cvelistv5