CVE-2022-26326 - Potential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.2

Back Back to CVE browser

MEDIUM

Potential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.2

Published May 2, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.37%

Description

Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2

Affected products

Vendor Micro Focus Product NetIQ Access Manager Default
n/a
- Version
  NetIQ Access Manager
  Status
  affected
  Constraints
  <5.0.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Micro Focus

NetIQ Access Manager

n/a

Version	Status	Constraints
NetIQ Access Manager	affected	<5.0.2

Remediation

Vendor solution

Install / Upgrade NetIQ Access Manager 5.0.2

Weaknesses (1)

CWE-601

Open Redirect

References (1)

https://www.microfocus.com/documentation/access-manager/5.0/accessmanager502-release-notes/accessmanager502-release-notes.html#t4f2msu33v8h
x_refsource_CONFIRM

Link	Providers	Tags
https://www.microfocus.com/documentation/access-manager/5.0/accessmanager502-release-notes/accessmanager502-release-notes.html#t4f2msu33v8h		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microfocus

Published May 2, 2022

Updated Aug 3, 2024

Reserved Feb 28, 2022

Link CVE-2022-26326

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-26326

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-26326

ENISA EUVD

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a