CVE-2025-54089 - CVE House
Back to Database
Status published Medium CVE-2025-54089

Cross-site Scripting vulnerability in Secure Access prior to 14.10

Vulnerability Description

CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with administrative access to the console can interfere with another administrator’s access to the console. The attack complexity is low; there are no attack requirements. Privileges required to execute the attack are high and the victim must actively participate in the attack sequence. There is no impact to confidentiality or availability, there is a low impact to integrity.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54089

Credits & Attribution

No credits recorded in the NVD database.

References

More from Absolute Security

View All →
CVE-2025-59596
CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client...
Medium 6
CVE-2025-54088
Open Redirect in Secure Access prior to 14.10
Medium 5.5
CVE-2025-54087
Server-side request forgery in Secure Access
Low 1.8
CVE-2025-54086
Excess Permissions in Warehouse
Medium 5.3
CVE-2025-54085
Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56
Medium 5.1

Affected Vendor

Absolute Security

View all reports →

Affected Software

Secure Access
Vulnerable Versions:
0

Timeline

Official Publish: October 2nd, 2025
Last Modified: October 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.