Microfocus vulnerabilities
Published CVEs affecting Microfocus products: 5 record(s), with severity, exploitation and fixes.
CVE-2026-11878
Medium · 6.1
CWE-79 Jun 24, 2026
Reflected Cross-Site Scripting vulnerability in OpenText Access Manager
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS).
This issue affects Access Manager: from 5.1 through 5.1.2.
CVE-2026-11877
High · 7.5
CWE-648 Jun 24, 2026
Missing Authorization Vulnerability in OpenText Access Manager
An unauthorized user can modify configuration through API
calls that affects the OpenText Access
Manager. This issue affects Access Manager before 5.1.3.
CVE-2026-2123
High · 7.8
CWE-280 Mar 31, 2026
Privilege escalation vulnerability in Operations Agent
A security audit identified a privilege escalation
vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions
Operations Agent may run executables from specific writeable locations.Thanks to Manuel Rickli & Philippe Leiser of
Oneconsult AG for reporting this vulnerability
CVE-2021-22506
High · 7.5
KEV High · 59 Mar 26, 2021
Micro Focus Access Manager Information Leakage Vulnerability
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.
CVE-2021-22502
Critical · 9.8
KEV Urgent · 79 Public exploit CWE-78 Feb 8, 2021
Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.