Microfocus Access Manager vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microfocus Access Manager: 3 record(s), with affected versions and fixes.
cpe:2.3:a:microfocus:access_manager

CVE-2026-11878 Medium · 6.1 CWE-79 Jun 24, 2026

Reflected Cross-Site Scripting vulnerability in OpenText Access Manager

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS). This issue affects Access Manager: from 5.1 through 5.1.2.

CVE-2026-11877 High · 7.5 CWE-648 Jun 24, 2026

Missing Authorization Vulnerability in OpenText Access Manager

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.

CVE-2021-22506 High · 7.5 KEV High · 59 Mar 26, 2021

Micro Focus Access Manager Information Leakage Vulnerability

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.