AM
Product
Access Manager
On CISA KEVExploited in the wild
18
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 9Low 0
Watch
Add Access Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22506 In wildKEV | 7.5 | Mar 26 | Micro Focus Access Manager Information Leakage Vulnerability Affected: before 5.0 |
| CVE-2026-11877 | 7.5 | Jun 24 | Missing Authorization Vulnerability in OpenText Access Manager Affected: 5.0 before 5.1; 5.1; 5.1 |
| CVE-2021-22527 | 7.5 | Sep 13 | Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 Affected: 4.5.0 before 4.5.4; 5.0 before 5.0.1 |
| CVE-2021-22496 | 7.5 | Mar 25 | Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3 Affected: before 4.5.3.3 |
| CVE-2026-11878 | 6.1 | Jun 24 | Reflected Cross-Site Scripting vulnerability in OpenText Access Manager Affected: 5.0 before 5.1; 5.1; 5.1 |
| CVE-2021-22531 | 6.1 | May 12 | A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability Affected: 4.5; 4.5; 4.5; 4.5; 4.5; 4.5; +9 more |
| CVE-2021-22526 | 6.1 | Sep 13 | Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 Affected: 4.5.0 before 4.5.4; 5.0 before 5.0.1 |
| CVE-2020-25840 | 6.1 | Mar 26 | Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0 Affected: before 5.0 |
| CVE-2018-17948 | 6.1 | Nov 20 | An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3 Affected: before 4.4; 4.4; 4.4; 4.4 |
| CVE-2018-12480 | 6.1 | Nov 15 | Mitigates an XSS issue in NetIQ Access Manager versions prior to 4.4 SP3 Affected: 4.1; 4.1; 4.1; 4.2; 4.3; 4.4; +2 more |
| CVE-2021-22525 | 5.5 | Sep 2 | This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1 Affected: before 5.0.1 |
| CVE-2021-22528 | 5.4 | Sep 13 | Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 Affected: 4.5.0 before 4.5.4; 5.0 before 5.0.1 |
| CVE-2021-22524 | 4.9 | Sep 13 | Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 Affected: 4.5.0 before 4.5.4; 5.0 before 5.0.1 |
| CVE-2014-9412 | – | Dec 23 | Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary… Affected: 4.0; 4.0.1 |
| CVE-2014-5217 | – | Dec 23 | Cross-site request forgery (CSRF) vulnerability in nps/servlet/webacc in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.1 allows remote attackers to… Affected: 4.0; 4.0.1 |
| CVE-2014-5216 | – | Dec 23 | Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote attackers to inject arbitrary web script or HTML via (1) the… Affected: 4.0; 4.0.1 |
| CVE-2014-5215 | – | Dec 23 | NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1)… Affected: 4.0; 4.0.1 |
| CVE-2014-5214 | – | Dec 23 | nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary… Affected: 4.0; 4.0.1 |
Showing 18