{"id":"CVE-2025-54087","state":"PUBLISHED","title":"Server-side request forgery in Secure Access","description":"CVE-2025-54087 is a server-side request forgery\nvulnerability in Secure Access prior to version 14.10. Attackers with\nadministrative privileges can publish a crafted test HTTP request originating\nfrom the Secure Access server. The attack complexity is high, there are no\nattack requirements, and user interaction is required. There is no direct\nimpact to confidentiality, integrity, or availability. There is a low severity\nsubsequent system impact to integrity.","publishedAt":"2025-10-02T20:05:38.092Z","updatedAt":"2025-10-07T19:27:01.644Z","severity":{"score":1.8,"label":"Low","version":"4.0","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N","source":"Absolute"},"assigner":"Absolute","products":["Absolute Security Secure Access"],"affected":[{"vendor":"Absolute Security","product":"Secure Access","packageName":"Administrative Consile","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"<14.10","versionType":"server"}]}],"references":["https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54087"],"weaknesses":["CWE-918"],"ingestedAt":"2026-10-29T20:09:31.862Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/54xxx/CVE-2025-54087.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-54087","state":"PUBLISHED","datePublished":"2025-10-02T20:05:38.092Z","dateUpdated":"2025-10-07T19:27:01.644Z","assignerShortName":"Absolute","assignerOrgId":"b6533044-ea05-4482-8458-7bddeca0d079","dateReserved":"2025-07-16T17:10:03.453Z"},"containers":{"cna":{"title":"Server-side request forgery in Secure Access","descriptions":[{"lang":"en","value":"CVE-2025-54087 is a server-side request forgery\nvulnerability in Secure Access prior to version 14.10. Attackers with\nadministrative privileges can publish a crafted test HTTP request originating\nfrom the Secure Access server. The attack complexity is high, there are no\nattack requirements, and user interaction is required. There is no direct\nimpact to confidentiality, integrity, or availability. There is a low severity\nsubsequent system impact to integrity."}],"affected":[{"vendor":"Absolute Security","product":"Secure Access","packageName":"Administrative Consile","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"<14.10","versionType":"server"}]}],"references":[{"url":"https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54087"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":1.8,"baseSeverity":"LOW","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"providerMetadata":{"shortName":"Absolute","orgId":"b6533044-ea05-4482-8458-7bddeca0d079","dateUpdated":"2025-10-02T20:05:38.092Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-07T19:26:49.025936Z","id":"CVE-2025-54087","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-918","type":"CWE","lang":"en","description":"CWE-918 Server-Side Request Forgery (SSRF)"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-07T19:27:01.644Z"}}]}}}