CVE-2025-54089CWE-79cross-site-scripting

CVE-2025-54089

Low · published October 3, 2025

CVSS v3.1
3.4
EPSS
0%
Percentile
10.0
In the wild
Unconfirmed
What it is

CVE-2025-54089 is a cross-site scripting vulnerability in versions

of secure access prior to 14.10. Attackers with administrative access to the

console can interfere with another administrator’s access to the console. The

attack complexity is low; there are no attack requirements. Privileges required

to execute the attack are high and the victim must actively participate in the

attack sequence. There is no impact to confidentiality or availability, there

is a low impact to integrity.

The record
Technical detail
CVSS v3.1
3.4 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00205 · 10.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-10-03T01:16Z
Affected products (1)
ProductVersionsFixed in
absolute/secure_access< 14.1014.10
References (1)
EPSS history
Timeline
  • 02 OCT 20:15Z
    Cross-site Scripting vulnerability in Secure Access prior to 14.10
    cvelistv5