CVE-2025-54087 — Server-side request forgery in Secure Access

CVE-2025-54087

Server-side request forgery in Secure Access PUBLISHED

Description (CNA)

CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. The attack complexity is high, there are no attack requirements, and user interaction is required. There is no direct impact to confidentiality, integrity, or availability. There is a low severity subsequent system impact to integrity.

Affected (CNA)

Vendor / product	Versions
Absolute Security / Secure Access	affected 0 before <14.10

CWE

No CWE identifiers supplied.

References

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54087

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.