📦

access_manager

Vendor: microfocus

Actively Exploited 1 CISA KEV List
PoC / Exploits 2 Code Available
Total RCEs 0 Remote Access
Total CVEs 33 Total Indexed
Avg. EPSS 2.45% Exploit Prob.
Latest CVE CVE-2026-11878 Jun 24

Security Vulnerability Index

Page 1 / 4
8.2 CVSS

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS). This issue affects Access Manager: from 5.1 through 5.1.2.

EPSS: 0.22%
6.3 CVSS

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.

EPSS: 0.30%
6.1 CVSS

A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.0

EPSS: 0.57%
8.0 CVSS

Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

EPSS: 0.58%
6.0 CVSS

Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

EPSS: 0.73%
4.9 CVSS

Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

EPSS: 0.49%
5.4 CVSS

Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

EPSS: 0.65%
5.5 CVSS

This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1

EPSS: 0.24%
7.5 CVSS

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.

EPSS: 25.69%
6.1 CVSS

Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The vulnerability could cause configuration destruction.

EPSS: 0.63%