Microfocus: >> Access Manager >> 5.0 Security Vulnerabilities
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS).
This issue affects Access Manager: from 5.1 through 5.1.2.
CVSS Score
8.2
EPSS Score
0.001
Published
2026-06-24
An unauthorized user can modify configuration through API
calls that affects the OpenText Access
Manager. This issue affects Access Manager before 5.1.3.
CVSS Score
6.3
EPSS Score
0.002
Published
2026-06-24
A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.0
CVSS Score
6.1
EPSS Score
0.005
Published
2022-05-12
Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4
CVSS Score
6.0
EPSS Score
0.007
Published
2021-09-13
Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4
CVSS Score
8.0
EPSS Score
0.006
Published
2021-09-13
Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4
CVSS Score
4.9
EPSS Score
0.005
Published
2021-09-13
Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4
CVSS Score
5.4
EPSS Score
0.007
Published
2021-09-13
This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1
CVSS Score
5.5
EPSS Score
0.002
Published
2021-09-02