AM
Product
Access Manager
On CISA KEVExploited in the wild
18
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 9Low 0
Watch
Add Access Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-11878 | 6.1 | Jun 24 | Reflected Cross-Site Scripting vulnerability in OpenText Access Manager Affected: 5.0 before 5.1; 5.1; 5.1 |
| CVE-2021-22531 | 6.1 | May 12 | A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability Affected: 4.5; 4.5; 4.5; 4.5; 4.5; 4.5; +9 more |
| CVE-2021-22526 | 6.1 | Sep 13 | Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 Affected: 4.5.0 before 4.5.4; 5.0 before 5.0.1 |
| CVE-2020-25840 | 6.1 | Mar 26 | Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0 Affected: before 5.0 |
| CVE-2018-17948 | 6.1 | Nov 20 | An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3 Affected: before 4.4; 4.4; 4.4; 4.4 |
| CVE-2018-12480 | 6.1 | Nov 15 | Mitigates an XSS issue in NetIQ Access Manager versions prior to 4.4 SP3 Affected: 4.1; 4.1; 4.1; 4.2; 4.3; 4.4; +2 more |
| CVE-2021-22525 | 5.5 | Sep 2 | This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1 Affected: before 5.0.1 |
| CVE-2021-22528 | 5.4 | Sep 13 | Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 Affected: 4.5.0 before 4.5.4; 5.0 before 5.0.1 |
| CVE-2021-22524 | 4.9 | Sep 13 | Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 Affected: 4.5.0 before 4.5.4; 5.0 before 5.0.1 |
Showing 9