CVE-2026-55399 | Medium | 4.3 | 2026-07-15 | CVE-2026-55399 is a resource exhaustion
vulnerability in the Secure Access publisher prior to 14.55. Attackers with
valid credentials to the Secure Access tunn… |
CVE-2026-55398 | Low | 3.7 | 2026-07-15 | CVE-2026-55398
is a memory management vulnerability in Secure Access clients and servers prior
to 14.55. Attackers with intimate knowledge of and total control… |
CVE-2026-33445 | Medium | 5.9 | 2026-07-15 | CVE-2026-33445 is a memory management
vulnerability in Secure Access servers prior to 14.55. Attackers with an
intimate knowledge of and total control over the… |
CVE-2026-33444 | Low | 3.7 | 2026-07-15 | CVE-2026-33444 is a memory management
vulnerability in Secure Access servers prior to 14.55. Attackers with intimate
knowledge of and total control over the tu… |
CVE-2026-40958 | Low | 3.7 | 2026-07-15 | CVE-2026-40958
is a input validation error in Secure Access clients prior to 14.55. Attackers
with intimate knowledge of and total control over the tunnel prot… |
CVE-2026-40957 | High | 7.5 | 2026-07-15 | o
CVE-2026-40957 is a frameable content
vulnerability in the Secure Access server login page prior to 14.55. Attackers
with control of a malicious web site c… |
CVE-2026-40956 | Low | 3.7 | 2026-07-15 | CVE-2026-40956
is a memory disclosure vulnerability in Secure Access client versions prior to 14.55.
Attackers with intimate knowledge of and total control ove… |
CVE-2026-40955 | Low | 3.7 | 2026-07-15 | CVE-2026-40955 is an integer underflow
vulnerability in the traffic parsing function of Secure Access clients prior to
14.55. Attackers with intimate knowledge… |
CVE-2026-40954 | Low | 3.7 | 2026-07-15 | CVE-2026-40954
is an integer underflow vulnerability in the traffic parsing function of Secure
Access clients prior to 14.55. Attackers with intimate knowledge… |
CVE-2026-40953 | Medium | 4.4 | 2026-07-15 | CVE-2026-40953 is a heap overflow in the
certificate parsing function of Secure Access clients prior to 14.55. Attackers
with local access and administrator pe… |
CVE-2026-40952 | High | 7.8 | 2026-07-15 | CVE-2026-40952 is a privilege misconfiguration
in the Secure Access installer for the Windows client and server prior to
version 14.55. Attackers with local ac… |
CVE-2026-33443 | Medium | 5.9 | 2026-07-15 | CVE-2026-33443 is a memory management error in
Secure Access servers prior to 14.55. Attackers with an intimate knowledge of
and total control over the tunnel… |
CVE-2026-40951 | Medium | 5.5 | 2026-04-30 | CVE-2026-40951 is a memory corruption vulnerability on Secure Access
Windows clients prior to 14.50. Attackers with local control of the
Windows client can s… |
CVE-2026-40950 | Medium | 6.5 | 2026-04-30 | CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access
server prior to 14.50. Attackers with control of a modified client can
send a speciall… |
CVE-2026-40949 | Medium | 4.4 | 2026-04-30 | CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access
Windows client prior to 14.50. Attackers with local control of the
Windows client can… |
CVE-2026-33452 | Medium | 5.5 | 2026-04-30 | CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access
Windows client prior to 14.50. Attackers with local control of the
Windows client can… |
CVE-2026-33451 | High | 7.8 | 2026-04-30 | CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure
Access Windows client prior to 14.50. Attackers with local control of
the Windows clien… |
CVE-2026-33450 | Medium | 5.5 | 2026-04-30 | CVE-2026-33450 is an out of bounds read vulnerability in the Secure
Access MacOS client prior to 14.50. Attackers with control of a modified
server can send… |
CVE-2026-33449 | High | 7.5 | 2026-04-30 | CVE-2026-33449 is a buffer overflow in a message handling function of
the Secure Access client prior to 14.50. Attackers with control of
a modified server ca… |
CVE-2026-33448 | Low | 3.3 | 2026-04-30 | CVE-2026-33448 is a format string vulnerability in the logging subsystem
of Secure Access client for MacOS prior to 14.50. Attackers with
control of a modifi… |
CVE-2026-33447 | Critical | 9.8 | 2026-04-30 | CVE-2026-33447 is a buffer overflow in a message parsing function of the
Secure Access client prior to 14.50. Attackers with control of a
modified server can… |
CVE-2026-33446 | Critical | 9.8 | 2026-04-30 | CVE-2026-33446 is a buffer overflow in the authentication sub-system of
the Secure Access client prior to 14.50. Attackers with control of a
modified server… |
CVE-2026-0519 | Low | 3.4 | 2026-01-17 | In Secure Access 12.70 and prior to 14.20, the logging
subsystem may write an unredacted authentication token to logs under
certain configurations. Any party… |
CVE-2026-0518 | Medium | 4.8 | 2026-01-17 | CVE-2026-0518 is a cross-site scripting vulnerability in versions of
Secure Access prior to 14.20. An attacker with administrative privileges
can interfere w… |
CVE-2026-0517 | High | 7.5 | 2026-01-17 | CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure
Access Server prior to 14.20. An attacker can send a specially crafted packet
to a s… |
CVE-2025-59596 | Medium | 6.5 | 2025-11-04 | CVE-2025-59596 is a denial-of-service vulnerability in Secure Access
Windows client versions 12.0 to 14.10 that is addressed in version
14.12. If a local net… |
CVE-2025-59595 | High | 7.5 | 2025-11-04 | CVE-2025-59595 is an internally discovered denial of service
vulnerability in versions of Secure Access prior to 14.12. An attacker
can send a specially craf… |
CVE-2025-54089 | Low | 3.4 | 2025-10-02 | CVE-2025-54089 is a cross-site scripting vulnerability in versions
of secure access prior to 14.10. Attackers with administrative access to the
console can int… |
CVE-2025-54088 | Medium | 6.1 | 2025-10-02 | CVE-2025-54088 is an open-redirect vulnerability in Secure
Access prior to version 14.10. Attackers with access to the console can
redirect victims to an arbit… |
CVE-2025-54087 | Low | 2.6 | 2025-10-02 | CVE-2025-54087 is a server-side request forgery
vulnerability in Secure Access prior to version 14.10. Attackers with
administrative privileges can publish a c… |
CVE-2025-54086 | Low | 3.3 | 2025-10-02 | CVE-2025-54086 is an excess permissions vulnerability in the
Warehouse component of Absolute Secure Access prior to version 14.10. Attackers
with access to the… |
CVE-2025-54085 | Low | 3.8 | 2025-07-31 | CVE-2025-54085 is a vulnerability in the management console
of Absolute Secure Access prior to version 13.56. Attackers with administrative
access to the conso… |
CVE-2025-49084 | Critical | 9.1 | 2025-07-31 | CVE-2025-49084 is a vulnerability in the management console
of Absolute Secure Access prior to version 13.56. Attackers with administrative
access can overwrit… |
CVE-2025-49083 | High | 7.2 | 2025-07-31 | CVE-2025-49083 is a vulnerability in the management console
of Absolute Secure Access after version 12.00 and prior to version 13.56.
Attackers with administra… |
CVE-2025-49082 | Low | 2.7 | 2025-07-31 | CVE-2025-49082 is a vulnerability in the management console
of Absolute Secure Access prior to version 13.56. Attackers with administrative
access to the conso… |
CVE-2025-49081 | Medium | 4.9 | 2025-06-12 | There is an insufficient input validation vulnerability in the warehouse
component of Absolute Secure Access prior to server version 13.55. Attackers
with syst… |
CVE-2025-49080 | High | 7.5 | 2025-06-12 | There is a memory management vulnerability in Absolute
Secure Access server versions 9.0 to 13.54. Attackers with network access to
the server can cause a Deni… |
CVE-2025-27706 | Low | 3.4 | 2025-05-28 | CVE-2025-27706 is a cross-site scripting vulnerability in the management
console of Absolute Secure Access prior to version 13.54. Attackers
with system admi… |
CVE-2025-27703 | Medium | 6.0 | 2025-05-28 | CVE-2025-27703 is a privilege escalation vulnerability in the management
console of Absolute Secure Access prior to version 13.54. Attackers
with administrat… |
CVE-2025-27702 | Medium | 4.9 | 2025-05-28 | CVE-2025-27702 is a vulnerability in the management console of Absolute
Secure Access prior to version 13.54. Attackers with administrative
access to the con… |
CVE-2024-6364 | Medium | 6.4 | 2025-05-13 | A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled attacker with both physical access to th… |
CVE-2024-40873 | Medium | 4.5 | 2024-07-25 | There is a cross-site scripting vulnerability in the Secure
Access administrative console of Absolute Secure Access prior to version 13.07.
Attackers with syst… |
CVE-2024-37352 | Medium | 4.5 | 2024-06-20 | There is a cross-site scripting vulnerability in the
management UI of Absolute Secure Access prior to version 13.06 that allows
attackers with system administr… |
CVE-2024-37351 | Medium | 4.5 | 2024-06-20 | There is a cross-site scripting vulnerability in the
management UI of Absolute Secure Access prior to version 13.06. Attackers with
system administrator permis… |
CVE-2024-37350 | Medium | 6.5 | 2024-06-20 | There is a cross-site scripting vulnerability in the policy
management UI of Absolute Secure Access prior to version 13.06. Attackers can
interfere with a syst… |
CVE-2024-37349 | Medium | 4.5 | 2024-06-20 | There is a cross-site scripting vulnerability in the
management UI of Absolute Secure Access prior to version 13.06. Attackers with
system administrator permis… |
CVE-2024-37348 | Medium | 4.5 | 2024-06-20 | There is a cross-site
scripting vulnerability in the management UI of Absolute Secure Access prior to
version 13.06. Attackers with system administrator permis… |
CVE-2024-37347 | Medium | 4.5 | 2024-06-20 | There is a cross-site scripting vulnerability in the pool
configuration component of the management UI of Absolute Secure Access prior to
13.06. Attackers with… |
CVE-2024-37346 | Medium | 4.9 | 2024-06-20 | There is an insufficient input validation vulnerability in
the Warehouse component of Absolute Secure Access prior to 13.06. Attackers
with system administrato… |
CVE-2024-37345 | Medium | 5.3 | 2024-06-20 | There is a cross-site scripting vulnerability in the Secure
Access administrative UI of Absolute Secure Access prior to version 13.06.
Attackers can pass a lim… |
CVE-2024-37344 | Medium | 4.5 | 2024-06-20 | There is a cross-site scripting vulnerability in the Policy
management UI of Absolute Secure Access prior to version 13.06. Attackers with
system administrator… |
CVE-2024-37343 | Medium | 4.8 | 2024-06-20 | There is a cross-site scripting vulnerability in the Secure
Access administrative console of Absolute Secure Access prior to version 13.06.
Attackers with vali… |
CVE-2018-16715 | High | 8.8 | 2018-09-08 | An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. The security permissions on the %ProgramData%\CTES folder and sub-folders m… |
CVE-2009-5152 | Medium | 4.1 | 2018-05-11 | Absolute Computrace Agent, as distributed on certain Dell Inspiron systems through 2009, has a race condition with the Dell Client Configuration Utility (DCCU)… |
CVE-2009-5151 | Medium | 6.7 | 2018-05-11 | The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code… |
CVE-2009-5150 | Medium | 6.7 | 2018-05-11 | Absolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the configuration block, which allows attackers to set up communication wit… |