Vulnerability · Published Jun 12, 2025 · Assigned by Absolute
CVE-2025-49080Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54
High 8.7
In plain English
A high-severity security flaw in Secure Access from Absolute Security. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Official description
There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to the server can cause a Denial of Service by sending a specially crafted sequence of packets to the server. The attack complexity is low, there are no attack requirements, privileges, or user interaction required. Loss of availability is high; there is no impact on confidentiality or integrity.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Absolute Security | Secure Access | 9.0 – before 13.54 |
Weakness: CWE-762 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N