Microfocus Access_manager
18 CVEs affecting Microfocus Access_manager. Latest disclosed: 2026-06-24. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22528 | High | 8.0 | 2021-09-13 | Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
CVE-2026-11877 | High | 7.5 | 2026-06-24 | An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3. |
CVE-2021-22506 | High | 7.5 | 2021-03-26 | Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerab… |
CVE-2021-22496 | High | 7.5 | 2021-03-25 | Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3. The vulnerability could cause informat… |
CVE-2026-11878 | Medium | 6.1 | 2026-06-24 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS)… |
CVE-2021-22531 | Medium | 6.1 | 2022-05-12 | A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ… |
CVE-2020-25840 | Medium | 6.1 | 2021-03-26 | Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The vulnerability could cause configuration… |
CVE-2018-17948 | Medium | 6.1 | 2018-11-20 | An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3. |
CVE-2018-12480 | Medium | 6.1 | 2018-11-15 | Mitigates an XSS issue in NetIQ Access Manager versions prior to 4.4 SP3. |
CVE-2021-22527 | Medium | 6.0 | 2021-09-13 | Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
CVE-2021-22525 | Medium | 5.5 | 2021-09-02 | This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1 |
CVE-2021-22524 | Medium | 5.4 | 2021-09-13 | Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
CVE-2021-22526 | Medium | 4.9 | 2021-09-13 | Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
CVE-2014-9412 | | 2014-12-23 | Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers to inject arbitrary web script or HTML… | |
CVE-2014-5217 | | 2014-12-23 | Cross-site request forgery (CSRF) vulnerability in nps/servlet/webacc in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.1 allows… | |
CVE-2014-5216 | | 2014-12-23 | Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote attackers to inject arbitrary web script or… | |
CVE-2014-5215 | | 2014-12-23 | NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) roma/jsp/… | |
CVE-2014-5214 | | 2014-12-23 | nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated novlwww user… |