CVE-2025-54088 - CVE House
Back to Database
Status published Medium CVE-2025-54088

Open Redirect in Secure Access prior to 14.10

Vulnerability Description

CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an arbitrary URL. The attack complexity is low, attack requirements are present, no privileges are required, and users must actively participate in the attack. Impact to confidentiality is low and there is no impact to integrity or availability. There are high severity impacts to confidentiality, integrity, availability in subsequent systems.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54088

Credits & Attribution

No credits recorded in the NVD database.

References

More from Absolute Security

View All →
CVE-2025-59596
CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client...
Medium 6
CVE-2025-54089
Cross-site Scripting vulnerability in Secure Access prior to 14.10
Medium 4.6
CVE-2025-54087
Server-side request forgery in Secure Access
Low 1.8
CVE-2025-54086
Excess Permissions in Warehouse
Medium 5.3
CVE-2025-54085
Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56
Medium 5.1

Affected Vendor

Absolute Security

View all reports →

Affected Software

Secure Access
Vulnerable Versions:
0

Timeline

Official Publish: October 2nd, 2025
Last Modified: October 7th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.