Micro Focus / Access Manager
18 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-11877 | Missing Authorization Vulnerability in OpenText Access Manager | MEDIUM | 6.3 | Jun 24, 2026 |
| CVE-2026-11878 | Reflected Cross-Site Scripting vulnerability in OpenText Access Manager | HIGH | 8.2 | Jun 24, 2026 |
| CVE-2021-22531 | A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ… | MEDIUM | 6.1 | May 12, 2022 |
| CVE-2021-22526 | Open Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 | MEDIUM | 6.1 | Sep 13, 2021 |
| CVE-2021-22524 | Denial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 | MEDIUM | 5.4 | Sep 13, 2021 |
| CVE-2021-22527 | Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 | HIGH | 7.5 | Sep 13, 2021 |
| CVE-2021-22528 | Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 | HIGH | 8.0 | Sep 13, 2021 |
| CVE-2021-22525 | This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1 | MEDIUM | 5.5 | Sep 2, 2021 |
| CVE-2020-25840 | Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The vulnerability could cause configuration… | MEDIUM | 6.1 | Mar 26, 2021 |
| CVE-2021-22506 KEV | Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerab… | HIGH | 7.5 | Mar 26, 2021 |
| CVE-2021-22496 | Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3. The vulnerability could cause informat… | HIGH | 7.5 | Mar 25, 2021 |
| CVE-2018-17948 | An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3. | MEDIUM | 6.1 | Nov 20, 2018 |
| CVE-2018-12480 | NetIQ Access Manager XSS vulnerability in versions prior to 4.4 SP3 | MEDIUM | 6.1 | Nov 15, 2018 |
| CVE-2014-9412 | Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers to inject arbitrary web script or HTML… | MEDIUM | 4.3 | Dec 23, 2014 |
| CVE-2014-5217 | Cross-site request forgery (CSRF) vulnerability in nps/servlet/webacc in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.1 allows… | MEDIUM | 6.8 | Dec 23, 2014 |
| CVE-2014-5216 | Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote attackers to inject arbitrary web script or… | MEDIUM | 4.3 | Dec 23, 2014 |
| CVE-2014-5215 | NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) roma/jsp/… | MEDIUM | 4.0 | Dec 23, 2014 |
| CVE-2014-5214 | nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated novlwww user… | MEDIUM | 4.0 | Dec 23, 2014 |
Showing 1 to 18 of 18 CVEs