CVE-2025-49083 HIGH

CVE-2025-49083: Data deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56

Vendor Absolute Security
Product Secure Access
Published July 30, 2025
Last update July 31, 2025

CVSS base score

7.0/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N

What the vulnerability does

01Description

CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to version 13.56. Attackers with administrative access to the console can cause unsafe content to be deserialized and executed in the security context of the console. The attack complexity is low and there are no attack requirements. Privileges required are high and there is no user interaction required. The impact to confidentiality is low, impact to integrity is high and there is no impact to availability. The impact to the confidentiality and integrity of subsequent systems is low and there is no subsequent system impact to availability.

Key dates

02Disclosure timeline

July 30, 2025 CVE published
July 31, 2025 Record updated